{"report_id":"0f863109-3402-4524-bc79-222f970a4ba6","version":6,"status":"done","tags":[],"date":"2026-01-11T02:02:44Z","url":{"schema":"https","addr":"marulabet.com/","fqdn":"marulabet.com","domain":"marulabet.com","tld":"com"},"ip":{"addr":"172.67.203.82","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"marulabet.com/","fqdn":"marulabet.com","domain":"marulabet.com","tld":"com"},"title":"Marulabet: Crypto Casino Games \u0026 Casino Slot Games - Crypto Gambling","dom":{"size":0,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","dom_hash":"domhash1f07f384c75181c66badb60ab1ec770b","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-05T14:03:25.26362Z","times_seen":17725631,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"marulabet.com/","fqdn":"marulabet.com","domain":"marulabet.com","tld":"com"},"ip":{"addr":"172.67.203.82","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-02-15T02:02:44Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-11","alert":"Sinkholed","trigger":"marulabet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null},"summary":[{"fqdn":"marulabet.com","ip":{"addr":"104.21.14.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-11-01","domain_rank":0,"first_seen":"2026-01-11T02:02:48.618903Z","last_seen":"2026-01-11T02:02:48.618903Z","alert_count":206,"request_count":206,"received_data":9560239,"sent_data":123851,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Next.js","description":"Next.js is a React framework for developing single page Javascript applications.","website":"https://nextjs.org","common_platform_enumeration":"cpe:2.3:a:zeit:next.js:*:*:*:*:*:*:*:*","icon":"Next.js.svg","categories":["JavaScript frameworks","Web frameworks"]},{"name":"React","description":"React is an open-source JavaScript library for building user interfaces or UI components.","website":"https://reactjs.org","common_platform_enumeration":"cpe:2.3:a:facebook:react:*:*:*:*:*:*:*:*","icon":"React.svg","categories":["JavaScript frameworks"]},{"name":"Webpack","description":"Webpack is an open-source JavaScript module bundler.","website":"https://webpack.js.org/","common_platform_enumeration":"","icon":"Webpack.svg","categories":["Miscellaneous"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"marulabet.com/","fqdn":"marulabet.com","domain":"marulabet.com","tld":"com"},"ip":{"addr":"104.21.14.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"541147804284bab493322b1ee1e55a04","sha1":"8dff76fd4c96fafdafae987c9374483a8de6b595","sha256":"f94dd039179a68f08ac102bf8236f80af599bf175f0adedec7a368edbecd4a99","sha512":"1c17cbc1fa7d4ed220b634f7d1257c36621e164acdedeae1d5e7884b6b0259d2b145e1dd98482b4e40b4aa5267fa4e54765183b731f3d715dce2534e16b5301f","ssdeep":"","tlshash":"99f081f47452faa7c5a2342401377f17176f110e75089810d71fd154573aa3b8393a8e","size":573,"data":"","first_seen":"2025-12-31T07:43:06.464068Z","last_seen":"2026-01-11T02:03:05.531349Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"marulabet.com/","fqdn":"marulabet.com","domain":"marulabet.com","tld":"com"},"ip":{"addr":"104.21.14.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"10d8b01b1b865a519be7d5b88e98bcac","sha1":"80cc14de2c8bb984866e74720f37ad57a80e9acf","sha256":"ce33f60576204820a75cd31723620bd7247276841db0647fb820abea4c8ab03d","sha512":"cf9a2f01ddc7113f81551041381a6e81350c9febe4b7f24f2143df7177c5bdf87a4cc5ef95a5a14ab06aeab4a710635b1e8c60e816eeeebe0766eeaa643d7208","ssdeep":"","tlshash":"f0f00e358b3c10220aec08f9c0898be83e2d7262e0245060fc69de7d0948cafd053eef","size":525,"data":"","first_seen":"2025-07-20T14:54:50.990021Z","last_seen":"2026-08-05T08:05:20.679565Z","times_seen":4770,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"marulabet.com/_next/static/chunks/27b71be17762de0f.js","fqdn":"marulabet.com","domain":"marulabet.com","tld":"com"},"ip":{"addr":"104.21.14.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"069193656f475ce4aee7e5e8e6d1079f","sha1":"d5cf6ae018c2fa7ecde21cab9b64d805cfa05763","sha256":"925c38b78da8bb575646dcb623a2dad342194cba6a837fa59248f726dacfc94e","sha512":"2e1974b798cff74ab1f73e0d94081deee5aba0c0ee662e19eaa19a483b47c63b0138f19c6151374575656aeaef474d549a82e520a56be415656995389c167c35","ssdeep":"","tlshash":"7d111f667191fab240ae40c44c3b4147f1ad0cb239ad70a08398e4ebb554b4c8471e28","size":1000,"data":"","first_seen":"2026-01-11T02:03:05.533679Z","last_seen":"2026-02-13T20:55:00.865163Z","times_seen":12,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"marulabet.com/","fqdn":"marulabet.com","domain":"marulabet.com","tld":"com"},"ip":{"addr":"104.21.14.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"c3e3e350f78cf22bd7b335d70b41a58a","sha1":"cce22220b6a8dff76692755cc45439b4ec474a4d","sha256":"ee6bb81f4e9fc030a39a7c71affc4d1f2b900baa4b4c7af83361388d7c39599b","sha512":"15b6cbf8bd67e82a4952004138ebc95c44e4d373317826f1560eeec13416cc1d6a38d834609ef4b713e7a9c92d1b1bbf84de08e2e4061ed3d1e3891982c25b0a","ssdeep":"","tlshash":"3f90025ff2302063a756122b166f15456421626565550869123830eb4955148474265c","size":57,"data":"","first_seen":"2025-06-30T14:23:19.448274Z","last_seen":"2026-08-05T14:04:28.032693Z","times_seen":65555,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"marulabet.com/","fqdn":"marulabet.com","domain":"marulabet.com","tld":"com"},"ip":{"addr":"104.21.14.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"00933d3d76fccf8f1d330b001b6dc118","sha1":"72a3f9f693a7d05bb6f1b38fd381a0f4e8bb5c7a","sha256":"4009527b06902e2fcd3c2ce78c0652caf43bda1783d1577198d0c3919782c607","sha512":"8fce1ced1efcaf7f17f0fbc71664f0ca59f5f7bddc682fdbc8b9ef3862def740a845bc3cd5cc3926c09b98782296d14c9b38d50b2dd6cb53b296ec76ba558602","ssdeep":"","tlshash":"090156a9f328199a66d92fbfa06a570c7460603e380600319507edfa1700de021cbd8e","size":845,"data":"","first_seen":"2025-08-20T23:30:20.291724Z","last_seen":"2026-08-05T14:04:28.033206Z","times_seen":50142,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"marulabet.com/","fqdn":"marulabet.com","domain":"marulabet.com","tld":"com"},"ip":{"addr":"104.21.14.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"1a6e1178e4bbf5730bd664a49dd3bc24","sha1":"17c3ae3273f9de6afbbdedf2e413dbb3a6722792","sha256":"3814cddd18b2095e01abb745a99e5ada90178e709c09879324c3b623f2d829ea","sha512":"cfb1aab0bf589e33fd12906f448ddbbf7163420a088de513b174304c9ba3a7abcd9b41c98bc4dd51edd0206c1fe4660db9857e3c6163d1bf50c670cefddee509","ssdeep":"","tlshash":"de9002b090c39c5890264186687100160b6c040c01080141132184d810115048e40d8e","size":43,"data":"","first_seen":"2023-03-13T01:07:12Z","last_seen":"2026-08-05T14:01:55.829408Z","times_seen":214845,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"marulabet.com/_next/static/chunks/c9d86bbb7c4acdee.js","fqdn":"marulabet.com","domain":"marulabet.com","tld":"com"},"ip":{"addr":"104.21.14.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"375038ec8cec6aada72e25b152bbeef5","sha1":"c78b20a01aa625bdb0e1ab2358db14698586a570","sha256":"606e1f12073f6762a118cf232414bf2899bf3ffd6f7fd06ae61dd2363cd682aa","sha512":"97d64ef9834f0b04009a43f212061a31b40a484389b2959a10b49264597a5c6a9a2af0e7b45d248e3bbce3d70e036cee4a77bf53eaca3c7f7a670ab7d43b1c5e","ssdeep":"3072:ueuxDvbX1azHazaNQNYBr5XtP9hO9R3+VQVhUGHTbGpLsev6ns4xlPfetAvJQXEM:ueuxb7jV2ECNvms+lPnjz6x","tlshash":"2c940888b760b022835666e0052f944fe27ef92d6c4a44bcf654e8f57cbd889653bf34","size":416158,"data":"","first_seen":"2026-01-11T01:55:53.513192Z","last_seen":"2026-02-02T22:33:10.118728Z","times_seen":69,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"marulabet.com/_next/static/chunks/5591d5031e0a2981.js","fqdn":"marulabet.com","domain":"marulabet.com","tld":"com"},"ip":{"addr":"104.21.14.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"74e073624036e19414a20231f712bb5c","sha1":"22d38714d6d9a2f404643ad7129ee9ab87c699a9","sha256":"2d75afa09cf563c2fed39091e4456406e1648cbf30414215fe41d46180fc4667","sha512":"2487ac02f925fbd8ed181bb83079af140ec780b4271c90437bd8ae3f10c33755211433e8344a4117ae1dc81419ae470f0f07645bce34a6b026fad03e96003bea","ssdeep":"384:TBBNKMneohgZlz7FSwiSCD7jVCdBLrS+X1Fv2bTNKcjGbvYekGLLoo+eqfQS5O:7NErxh54fVCb++n2babYVoNqfP4","tlshash":"ecd22f159165bbecf53b04b8ba6d806c721e9b54cb0f8939f5b83c311a410d4ba67bce","size":29243,"data":"","first_seen":"2026-01-11T01:55:53.433179Z","last_seen":"2026-01-11T02:03:05.264256Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"marulabet.com/","fqdn":"marulabet.com","domain":"marulabet.com","tld":"com"},"ip":{"addr":"104.21.14.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"87503606ea40b046fd12a266da085eea","sha1":"e331e665a8db89fb9f2f6cb81878fac57c2f646e","sha256":"e086d11b563701454f5f08b8554009eac2f8a57c029a6ce4c201bb2f826461d1","sha512":"a1be3b5d73c1026514c402e3e4e998cac42b6bc9fb3e8c67ca7598f0b6a96369048b429f67e97f0defb4d46f46eb6d20b5e65bbee7f08db9b1a23e3d2bcef358","ssdeep":"","tlshash":"3d412d54f40df9f16852de0f22364e3584c49efd8271d598f38dcf9641824ba0399a8b","size":2226,"data":"","first_seen":"2026-01-11T01:55:53.58045Z","last_seen":"2026-01-11T02:03:05.538707Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"marulabet.com/","fqdn":"marulabet.com","domain":"marulabet.com","tld":"com"},"ip":{"addr":"104.21.14.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"c490b0bc3692dc27295abe5635419665","sha1":"c27e8469aacad2d325af3aef0a36a6bcd47868fe","sha256":"726606b581b8902e075934d65c598b657d263d2efa22a7ebd90ea45bdfedafa6","sha512":"5dd1b2313bd16c547aa07e94fd587c1965950c950960d963c8745a702aa5150e3e96c1eaba0c59f74345ad59d55a406bc36dd4375f289b71eff630f00dad5127","ssdeep":"96:LU7a7cg1xqzc/xmWv7a6ExqzkG60zqNsav7ZyLipirFz9:0gnqzcpm3qzZW8xz9","tlshash":"9cd19d1e7805da4aec7e7d79023e9d3b10cc8d7b8761dab8c19ece190b020b917dad81","size":6770,"data":"","first_seen":"2026-01-11T02:03:05.540387Z","last_seen":"2026-01-11T02:03:05.540387Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"marulabet.com/_next/static/chunks/af839f09469b1c23.js","fqdn":"marulabet.com","domain":"marulabet.com","tld":"com"},"ip":{"addr":"104.21.14.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"976cc6c3f3b537f83e480377b5cd27e2","sha1":"04192bfb234623130d4949e91782250c0f213b7b","sha256":"b278f6c07258b51fd5cb69fecd04d9b67948f5cf8831821314c150b5dda137f2","sha512":"ce7e52d6aed03315ebe9c78977a6c79fb8578cab8088f28a7ef8c94d845d615b8e48056fd89753b6fd78c5fbbb9805f90e24f3c03bd5c7c09b7ceb1111213c12","ssdeep":"192:xvDrMmBzbwNDWf8HbnWtEf5CHcI9uCwcDsF5uL3sznvbPLJ8SSpCA+hqSC:xvDQvBX6mf5acQuC9s2sLjF8SSsZqSC","tlshash":"4ea2096171426ebcf67b05a4e06dc008b23e6e1ddb4fc929b67c7c392c0a5c07a46f96","size":21958,"data":"","first_seen":"2026-01-11T01:55:53.462033Z","last_seen":"2026-01-11T02:03:05.360735Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"marulabet.com/_next/static/chunks/5b4c38a1263b182c.js","fqdn":"marulabet.com","domain":"marulabet.com","tld":"com"},"ip":{"addr":"104.21.14.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"f8e9ec1997bd5d30fc21d00e4ead8870","sha1":"204eb1cf4545e0065728e78078f652c93127da73","sha256":"f2ad2659ebf3d8c610e1d765790329fb17c236fc2cce6bd92041802c1f8446fd","sha512":"37dba0ba6cb75187896c36a05d8ba09efc92dbcf9be03b47a1a4840378161d97b3a9fd1928ee668c4794dbda8d37a7dd72e66ded40f9180d5af18d433f199748","ssdeep":"96:GDj0znt1HChTQV4+NBBBKrTukNYx5bLOPtFffaFAbkqiWFTTGD/TMAI:aoz7HCcBQc2VFffaebkqDQw","tlshash":"98b134d4911c42bc985523a8522ad843635d10ff35bb5ea4d9afce60a2c74cce2a74db","size":5360,"data":"","first_seen":"2026-01-11T01:55:53.429255Z","last_seen":"2026-02-19T17:02:28.608647Z","times_seen":73,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"marulabet.com/","fqdn":"marulabet.com","domain":"marulabet.com","tld":"com"},"ip":{"addr":"104.21.14.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"40297afdc49ed7fd9ec460dd06bab461","sha1":"3383c1e551734a5e88464ed4750230605f666a58","sha256":"f73d2863973681a0937578d266b97810b7ea5be632e36106c3cca8f7e7966508","sha512":"1a7fc98faf6d3bbc92b2ebe2911055d2d018d2c120356e69f9b79cfaf8199c2c1084757e51de54566776af0be066a711531effc66d27b95f18f12cdf22709583","ssdeep":"48:LzqTeIQqTeIdqTeIOZ0FmritW6WuryIO6zzoeuSR2Z4YCeCMuUHIq2utDeMqTeQk:LGeUepedg7XPh4Ue/","tlshash":"45a1700ebc19db109d3aac7e063b9f7644ccdc73c670d96c92afce0a19166f60798851","size":4691,"data":"","first_seen":"2026-01-11T01:55:53.58211Z","last_seen":"2026-01-11T02:03:05.542342Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"marulabet.com/","fqdn":"marulabet.com","domain":"marulabet.com","tld":"com"},"ip":{"addr":"104.21.14.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"38c1b502451cf61147e0e1f77a931780","sha1":"98e31f0ab885c518ba67daedf5220285d1ec5254","sha256":"65286b85d34f66f38160583d7919a775a2e284571493865fc00aeb30437135a6","sha512":"06545dbcee2e984949d79b3098965bbbe4a014c53193306f4ca9913bce059626aa3060c5377cf5a7b75b07c98e10f39db698c526cc1dfeda164ddb6545dad98e","ssdeep":"","tlshash":"9821496e7415df0eec6e3c59243edc7a20ccc5bb8288deaa41cddd15494683a76c1ac0","size":1160,"data":"","first_seen":"2026-01-11T01:55:53.58343Z","last_seen":"2026-01-11T02:03:05.545019Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"marulabet.com/","fqdn":"marulabet.com","domain":"marulabet.com","tld":"com"},"ip":{"addr":"104.21.14.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"41ac6f05e6c9f8336885e4f22523a9ed","sha1":"37af2342ba9e7acdceb3aa78c5224ab23169d606","sha256":"a66cb2de96c0ec4baffe22fc4796613b59b499d25dc1be799dca26d37c714e94","sha512":"88a542241741fb8fa2e36ef0c6093e72ac12742e3094e29e28ea01adfcf6be6fea296d83d0534e79efaf63387e7046fb92c85b32cf039450ac0c3311854be025","ssdeep":"","tlshash":"71f0e5e2dc12cc0fc3638e2d183e6c7522cdda7006a9624afc94c9385dd6e380ad4d92","size":444,"data":"","first_seen":"2026-01-11T01:55:53.587318Z","last_seen":"2026-01-11T02:03:05.54625Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"marulabet.com/","fqdn":"marulabet.com","domain":"marulabet.com","tld":"com"},"ip":{"addr":"104.21.14.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"7c7b344ac505b8db44fd1f80c774351c","sha1":"049a6ab4726376da5bb90b882ab228b4328dbd34","sha256":"383aaf861990c445cae3855edccbac5c54b9072356a320d8ffbc93394a52abcb","sha512":"4d2ff0dd69778ca02f9411bc697a9257a062abb9c8d3c11f1f197234d6153d27f7863c4d25457366d013d84990877716a469a7569cdc07a526209d0b817d773e","ssdeep":"","tlshash":"fb318b6e4c19ed46e57a6d39067efc3504898db747605f6ac6adce4e248203c5ff8e40","size":1466,"data":"","first_seen":"2026-01-11T02:03:05.547415Z","last_seen":"2026-01-11T02:03:05.547415Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"marulabet.com/","fqdn":"marulabet.com","domain":"marulabet.com","tld":"com"},"ip":{"addr":"104.21.14.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"78c2dfc0304e577530a5306e70a28952","sha1":"0161d879029f250de1df14aa8c2792ebf9421ef1","sha256":"5d35c68981035920090bf8488f0f5b28c644716dcdd4e47056fe062972e36d2d","sha512":"3a7af24d6663406132a29dee77b476fdb6201ff6c43ec5ac61c006e7c51e728b51201e4f226f7cc691e8a2ce1bd0c5e21ce8b2cc54ff36c456c2c042e109e13b","ssdeep":"","tlshash":"3041f8afd80ee8407864cd9f043e6f62c5d5d8b380321838e75dddad05b243b17a98a1","size":1950,"data":"","first_seen":"2026-01-11T01:55:53.589937Z","last_seen":"2026-01-11T02:03:05.548895Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"marulabet.com/","fqdn":"marulabet.com","domain":"marulabet.com","tld":"com"},"ip":{"addr":"104.21.14.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"93fbabc1819e569d11820abd62d5da58","sha1":"e579f24d6c56f2f0750b037ddfde2dd9da254d06","sha256":"987cb991f88dfe81c1a1ea264d5c61736baba6f50c4c3d5dcdb14474d00a268c","sha512":"72b1217bcf366b0f8ae9e5396d967abb65e139de4acd7416fd58bce49fd537a19919a09cc6b91252dfddc8034dcb5943f81913098ddad1c9c2fca6ecc370d4e5","ssdeep":"","tlshash":"b341e7afd80bf8507c64cd9f043e6fa2c5d5d8b380311938e75ddaaa05b243b17ad8a1","size":2086,"data":"","first_seen":"2026-01-11T01:55:53.590907Z","last_seen":"2026-01-11T02:03:05.549875Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"marulabet.com/_next/static/chunks/afe9e5f1517daf8c.js","fqdn":"marulabet.com","domain":"marulabet.com","tld":"com"},"ip":{"addr":"104.21.14.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"f76bb6e3d34209f03535b151deeb61e6","sha1":"bc8eddccc2633b6f0b755a742cc6f6d3155d7973","sha256":"17464d2798351413136a50b6d85782c9a84ac29421cf6b73fee30d0d230c6f9b","sha512":"b3e0e8f37c6260f9bb6ff18906c926afb3c2a4042a9644c8fe9829aaab666a535fce4638dd46402e569c4ecd2e6b636056a90ca0b21899912b9350795e77a076","ssdeep":"768:IwR2vTVWPH/y/nNqbK9b67oQh9PAwjpXVbzPG/T2dgWatCwAsKdOBkBQym1mL9Kr:vWzQb5jVVbzQ2dGgwA1UiBl5KAwOG","tlshash":"9733b5e5b396723143da0265907e4107f37d8d94104a8128fa6dc9de3aa848db3f7f7a","size":52109,"data":"","first_seen":"2025-12-31T07:43:06.459924Z","last_seen":"2026-01-11T02:03:05.266473Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"marulabet.com/","fqdn":"marulabet.com","domain":"marulabet.com","tld":"com"},"ip":{"addr":"104.21.14.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"0ab56136c3193ee8bb8db09b9bf870b8","sha1":"1616b29caa4a469279b2c33a428a7d52c41b4c2e","sha256":"569e6bb8684cf586a2ce2c8699435fda093577a1e66b421cae5ec6089e35f1d2","sha512":"2649f9cdc966774fcbed15bcd7023b60f92cae41ecd0ebd40b35d9dd3be1979b9ee1cda090934fcdb705378e8d639eb30450cb62122f3849f9924745b5d0def8","ssdeep":"","tlshash":"9441f8afe80ef8507864cd9f043e6f6285d5d8b380321938e75ddda905b243b17a98a1","size":1955,"data":"","first_seen":"2026-01-11T01:55:53.591776Z","last_seen":"2026-01-11T02:03:05.550691Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"marulabet.com/_next/static/chunks/70c45d6675f019b3.js","fqdn":"marulabet.com","domain":"marulabet.com","tld":"com"},"ip":{"addr":"104.21.14.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"109dedfa8a9df629754107a4360cbed2","sha1":"dca0b5125582597623dd7a5f137bb172eacebd4b","sha256":"66937c36d62b42f9c0de04ed3961be40fff3bca6a84a6e8675ccf6bcb7bcb244","sha512":"75917cbf7e84472836f0f36f0d6204002de0ef185d062a67a4160f39b8165bcdb07ed964ccf923f78e9a4bec22cbda7fd444445695eb1f68f809df6d0d9a2def","ssdeep":"384:I+FjjzUO4kzleEPQKKUdoxUCHSWiDp1NpTLTJJQrtgG40/H5JiereqeCEYjYvbxI:I8jkO4YlMsdpCzifNpTByEqrddwR4","tlshash":"96e294a971d5f4910ba354b5803f500bf23e0c76296da0f4e3a2cdf9b9a055ed132f9a","size":31321,"data":"","first_seen":"2026-01-11T01:55:53.490165Z","last_seen":"2026-02-19T17:02:28.781185Z","times_seen":96,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"marulabet.com/","fqdn":"marulabet.com","domain":"marulabet.com","tld":"com"},"ip":{"addr":"104.21.14.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"7d527a420e4c8b42e7dc3e9a37afb3ba","sha1":"2e8523ec267d01c15bc01b9412a77c3b75c1ccfd","sha256":"ce89cb098054251a7954196773a9713e2697b06a50c901219ad27a629b573ca1","sha512":"8ba0ac5359a0eb94f8ba4c24da667faa7adb09e5b43055f81dcdfc2464178a16696d98c382641eb533807b44e42de47531e82aa40a5b12681d4dea49a04a8a51","ssdeep":"","tlshash":"3541f7afd80ee8107874cdcf043e6f62c5d5d8b380325838e75deda905b243b07a98a1","size":1953,"data":"","first_seen":"2026-01-11T01:55:53.592739Z","last_seen":"2026-01-11T02:03:05.551439Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"marulabet.com/","fqdn":"marulabet.com","domain":"marulabet.com","tld":"com"},"ip":{"addr":"104.21.14.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"2c896be704021f502c05bb821578fe6e","sha1":"ef05215839e07d8b378489bfa1d51b769097cc24","sha256":"1de5042c41e5995e2d249c6c91e4c073c04654dc34c390e94ded818a8061af93","sha512":"05ca4430981034f1d444768623b56d8b10cdaa4c1f13bd025ad2307914d9298184e6a8f7da18660f0a6928595c325bc2b2c3e0361baefa42f4cc10249461390e","ssdeep":"96:Lb9bFx7SXV+lJesW1d5lvGLYXVXOQXV+hV+6nV+4VX8iyV+OtVX6xV+6JV+XVXoO:xesW1d5lvGLYGewy72w","tlshash":"edc19d78b419cd59fcce3c11343f5c3a658d929b8699de32d2d9de208287479bf626c0","size":5898,"data":"","first_seen":"2026-01-11T02:03:05.55218Z","last_seen":"2026-01-11T02:03:05.55218Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"marulabet.com/_next/static/chunks/3dfac233cc9e6674.js","fqdn":"marulabet.com","domain":"marulabet.com","tld":"com"},"ip":{"addr":"104.21.14.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"dfdf96d96d75a732880ce490adb5d7d2","sha1":"0471293f4f366ce695157ccd1884d7e6cd8dd1fa","sha256":"bd922dd91a8ade5b1b81d3ac3823a46eda5aab4c25e4a64d594930eb669096c0","sha512":"9435c29d5a1ef08ece26e1a8e57b5dbbb447e4a15610fc15c8c16a1a865aeaaf233b085aff2d12ac0aaf1e7121d14d47c9ba1704eaeea3f5fe8c83dd76f4f27f","ssdeep":"96:RgjKIjI4v5ksYquBKZ/L5QXqIYF6DfRxbztE:a+RRBsh6DfRxq","tlshash":"27b100ba031ca7ec7883446833229423636fa1bf71de53b05d6fc9b055d74c8e6634a6","size":5552,"data":"","first_seen":"2026-01-11T01:55:53.528592Z","last_seen":"2026-01-11T02:03:05.343103Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"marulabet.com/","fqdn":"marulabet.com","domain":"marulabet.com","tld":"com"},"ip":{"addr":"104.21.14.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"797b4b1bc933789bc0e2c6b80629cecd","sha1":"d05c1091e7e5b01d267d92c28da348a22ca20cf8","sha256":"ecef87cd6960ddf4755734ac0e6e6243869fa5fe2144f8838f76d213c0786d56","sha512":"92731c31c3c1f5c0c3dd0696f62454b634516436ffc3b4531c7b3b12bd18343ec0422a18d03fe35bf33143f4e2fa6316cace629dbfe28e06dd4d17bd737b95c5","ssdeep":"","tlshash":"cd41eaafe80ee8507c64cd9f043e6f63c5d5d8b384321838e75ddda946b243b07a98a1","size":1899,"data":"","first_seen":"2026-01-11T01:55:53.594595Z","last_seen":"2026-01-11T02:03:05.554Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"marulabet.com/","fqdn":"marulabet.com","domain":"marulabet.com","tld":"com"},"ip":{"addr":"104.21.14.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"3fcf35855c22e489056050b18cc989e2","sha1":"c03676638cc3f23dd514410d8e5826fa5192815e","sha256":"55f463ed242e4f0d70f9d099bb6ff69289173a2f13db3a32ff3a8df59ec88909","sha512":"91e1136bc1c956437d22dfbb78e7de7d33ffb04ebae6a3c3ce85e7ed14039391b862343eb74ba3a955c75af47b29d8410aa6d15bf222a357293b51d322393fbc","ssdeep":"","tlshash":"3841e8afd84ee8507864cddf043e6f62c6d5d8b380325938e75dd9a905b243b07a98a1","size":1892,"data":"","first_seen":"2026-01-11T01:55:53.595856Z","last_seen":"2026-01-11T02:03:05.555291Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"marulabet.com/_next/static/chunks/e1c6971655194e10.js","fqdn":"marulabet.com","domain":"marulabet.com","tld":"com"},"ip":{"addr":"104.21.14.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"6c23170c9ca2c6ad490ae738833d4771","sha1":"353e9c7503ce723e841994f740f7514d642ed21c","sha256":"2baf41044b6ae964e9ee751f3905775943be60770a44546a4d079919322e8128","sha512":"0fa4d79c037e8845c6c74b2a8db0b649d748f69f52c69fbdc10d750361551f3f41d7ec6f4decfe47a5554c2b30d6fa9bf603703c5c77797f80d85f5649b7e2fc","ssdeep":"768:jouEv/zy1gk+eUNXbkX+4BNtr3kJMlZE3BkefskEJ5s+:cuqu1gk+eUVkX+W3wCZENfskEJ7","tlshash":"30e2a5e63602ba73e3dd01da10b74455e37e255e2009402cf97d5cae3a78949c0ebb7b","size":32483,"data":"","first_seen":"2026-01-11T01:55:53.472858Z","last_seen":"2026-02-19T17:02:28.738095Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"marulabet.com/_next/static/chunks/876d3bd1a990218b.js","fqdn":"marulabet.com","domain":"marulabet.com","tld":"com"},"ip":{"addr":"104.21.14.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"faf54271b54b485960c8baa83e2bb197","sha1":"35134d28e28c9b303b5cbddd4f0f5ec4851a8305","sha256":"7d30cd5b01ec5aa024656ea320ba517e0b9fbbb930ea5580c10d1f5dd043bf89","sha512":"d2854b278af4f4feb56f5d8a322f3346d61968bb55638a568625c34202e0b6c30ce46d9007ec37dd61101fe59bcbf9c1c85f5fcdcf39fcbe6bf78222753021de","ssdeep":"6144:D6qmUJ8sISU4Dg7aTg+AZHm/dXGNx5Qs/EVgRE7edfazljpsiU:qk3AZG/dXGNxfbUzNU","tlshash":"15b45bf93696b0335bb30266507b1402b338196b244e4864f365edde78a844ea1f7f7e","size":540383,"data":"","first_seen":"2026-01-11T01:55:53.423443Z","last_seen":"2026-01-11T02:03:05.240486Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"marulabet.com/","fqdn":"marulabet.com","domain":"marulabet.com","tld":"com"},"ip":{"addr":"104.21.14.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"44026351cb7409365e164c5c33afab9e","sha1":"0a128cd311e7d7e01ab035a99d1424eb98840a19","sha256":"06c040699bc84fedc6c0a0f2a79672c48258682e0fc3c80d548d5a989f94d98f","sha512":"a35b05d59a6a82343a3af5d22544e85513fde46ed391e01244b7201ab4a436412d4f0094df7d9531cba35569e34f2e18daa4130ce942f6bb00b1818f382ec5ef","ssdeep":"","tlshash":"e741e6afe84fe8507c64cd9f053e6f62c5d5d8b380321838e75deda905b243b17a98a1","size":1901,"data":"","first_seen":"2026-01-11T01:55:53.596724Z","last_seen":"2026-01-11T02:03:05.55687Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"marulabet.com/","fqdn":"marulabet.com","domain":"marulabet.com","tld":"com"},"ip":{"addr":"104.21.14.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"7536c7b1aebab8f05c962b91141a2d34","sha1":"ec28326baed9f2101ccc0d564e799ae435a787df","sha256":"0bc17448545876885374956f051ec2445b9f5c8b02a965b70aa25024326204c7","sha512":"e449b08a8ffda3865a23183fb824e9008810ca4472942d7201722a98bed41298ae3c7f08679249a953a1b2154e3ec6f679ad8b63a92831c5e881f08e4739551e","ssdeep":"768:q5Mjp0H7oY6cM/2y/XfjQ1Fr3PlYUgHUk0yLO/rAW6JU47dwai2fOFyfXr4pEvZo:N6M/2yT+VvzrADJU4B/i2f3kpMZcf","tlshash":"88f2a71ff509c993c8c33e9a3bbe6e76766d810a02d180bc5dddc51d12a693c6bbb580","size":36510,"data":"","first_seen":"2026-01-11T01:55:53.597666Z","last_seen":"2026-01-11T02:03:05.558058Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"marulabet.com/_next/static/chunks/36fc4d948ba3a225.js","fqdn":"marulabet.com","domain":"marulabet.com","tld":"com"},"ip":{"addr":"104.21.14.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"e5bc9167be44dabe2893fa87d2c689a7","sha1":"1191b2edbf10088a625a6e28e1e83384e57c8523","sha256":"ddc188cb8c7cc0352fcdb496595255d9ff9cbce2899969f0b3df0dd1fe500822","sha512":"124d650dd03b5a40c008860bd00f38c49cbb13802eba361286c77c75d8fd2d9da7a532c6ec43e3323ad18b8c684161d2eb7d0089a18666966af8b36d62e48b61","ssdeep":"192:GR0RE0bTl30i9mYWxj9vomOc3TeuR4s7KlHpIhkz60lwkf:uE0iUtxOc3auR4sWlH6au0lw+","tlshash":"0542a8647114eefce5ab10a2f82f851d312e7f98da0fc520b57cbca819244943a56fdb","size":12028,"data":"","first_seen":"2026-01-11T01:55:53.548038Z","last_seen":"2026-01-11T02:03:05.515537Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"marulabet.com/_next/static/chunks/944ac4923c54ffbd.js","fqdn":"marulabet.com","domain":"marulabet.com","tld":"com"},"ip":{"addr":"104.21.14.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"e0a3c6529b52f3ca76fac8b4824ee9af","sha1":"38b98c5b73f6c046e438618cb9085e16dfa344cb","sha256":"28f068c9ca2b7701f59bf1e653a54c3000dc2191a0800c26c1693ef283148541","sha512":"bd0a312fe3106a32e07f3c53a52c6ec5f4d434a2b485995731710da7d9c69c8f1aae5536cdb8469914ff8f2228875d802ab55d30af07eb0183e371249fa8b94a","ssdeep":"96:ESEwSEWAR3IWcvh4KyqcnnToxHYypVENVIctVwdj6BKGyFpEKo:H1KW/nExH/pVsIctC6A9sd","tlshash":"ac915494a990efdcb45e01a8a03dc00db16d6e6dce1eca39f1ac34b129550d53b6b7c6","size":4385,"data":"","first_seen":"2026-01-11T01:55:53.465489Z","last_seen":"2026-02-19T17:02:28.643228Z","times_seen":73,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"marulabet.com/","fqdn":"marulabet.com","domain":"marulabet.com","tld":"com"},"ip":{"addr":"104.21.14.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"8e4432bbaa016756527b7507d2249fa0","sha1":"e57673c0a4a5c6369d261f7eb32f04002455199e","sha256":"d1cc567bec884f95a3768a29027de80d2792c34c70c01486680bd5534a057c1a","sha512":"b4d6ba141214396a3b2bdde49bdaa915286a4e61524cf04ffeb0d3c21d9da2fafadff49786b781db3a8570937b2913f9fca35144a94368562b3c21d97c0ce0c0","ssdeep":"","tlshash":"9e41e6afe80ff8507c65dd9f043e6f62c5d5d8b380321838e75de9a905b243b07a98a1","size":1899,"data":"","first_seen":"2026-01-11T01:55:53.598639Z","last_seen":"2026-01-11T02:03:05.559224Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"marulabet.com/","fqdn":"marulabet.com","domain":"marulabet.com","tld":"com"},"ip":{"addr":"104.21.14.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"401487f87e6c812040d8b10137b1073c","sha1":"bdd4bd5d9e422950ef2a46d763691981fba4547a","sha256":"952b9073775766a4f2fa36b817505ad785fec5575572411cf610d84e9feb2f1d","sha512":"1c47c9de0d4b65cc7a28559ac1f397678a50f548527b4f7e1b041761ad585f6de6d728696da65a4f70899fd1dee882fc334e53e356266d36fe06da41d2ce1844","ssdeep":"","tlshash":"e44108afe80ee8407c24cd9f043e6f62c5d4c8b380325838e75deda905b243b07a98a1","size":1906,"data":"","first_seen":"2026-01-11T01:55:53.600297Z","last_seen":"2026-01-11T02:03:05.560324Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"marulabet.com/","fqdn":"marulabet.com","domain":"marulabet.com","tld":"com"},"ip":{"addr":"104.21.14.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"bd60e98d90314a85c1375a9081e3c779","sha1":"7b9d63b071ef707bc813172cd908815fdf61b2d4","sha256":"04c3195997d5de8a0b8441adf01da0848cb331f438669363f93496818dbf1fb7","sha512":"88e2806863d323e5ffe78f83c4d6e4eeee27022047b03ddd0bda70c5544b03fd31442106869e0d6b96b66c980f4e9909064ac5b853b729b017e970ea8934d904","ssdeep":"","tlshash":"3441e8afd84fe8507c64cd9f043e6f62c5d5d8b380321938e79dd9a905b243b07a98a1","size":1899,"data":"","first_seen":"2026-01-11T01:55:53.601177Z","last_seen":"2026-01-11T02:03:05.561611Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"marulabet.com/","fqdn":"marulabet.com","domain":"marulabet.com","tld":"com"},"ip":{"addr":"104.21.14.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"b252b4a37ada60894b83ff543dc27811","sha1":"87cadc7ae9f47451fc35965a395986bd570a2842","sha256":"ff95b4f1a0eb8d03bca9bb93736263f14066c4f2d148440df8f54b10fa242dfa","sha512":"38a045f0710fd3e8c2c493f9d9373e8408d27be17e876b07add9957b1489fcca003770fb467677a546b216d1b5a32b8da027012e9f2f4100edb37ced5f3cb923","ssdeep":"","tlshash":"5c41e8afd84ef8507c64cd9f043e6f62c5d5d8b38032583ce79dd9a905b243b07a98a1","size":1909,"data":"","first_seen":"2026-01-11T01:55:53.60202Z","last_seen":"2026-01-11T02:03:05.56696Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"marulabet.com/","fqdn":"marulabet.com","domain":"marulabet.com","tld":"com"},"ip":{"addr":"104.21.14.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"78e702f46437d5d6c6d149bed117b056","sha1":"5b179f78647f8d152a55b2da52e8c0c990b3311b","sha256":"dedf62da01cbae0e3311b25e3dba950f109a6e82850be19f59bf3b650c68e1fe","sha512":"92851474a5442c53d4c0847c720a30baa78c046ca4e0bade689409b7e6ca3cf3bfae4c37d741b40c0ff4f1d22beec7de79585e40c4548c84b2be4fc6a71d15de","ssdeep":"","tlshash":"f441f8afd80ef8507c64cd9f043e6f6285d9c8b38032183ce79dd9a905b243b07a98a1","size":1912,"data":"","first_seen":"2026-01-11T01:55:53.603834Z","last_seen":"2026-01-11T02:03:05.569666Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"marulabet.com/","fqdn":"marulabet.com","domain":"marulabet.com","tld":"com"},"ip":{"addr":"104.21.14.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"0fb27f50521a78501d9fac257700e5f9","sha1":"ba395f9d2176bfc331c85756caeedb90f349a10f","sha256":"d59c737e79525b90b1af0f20c2892b15132db25e326af44dcb689e0a882799d2","sha512":"671e072fac0f10dfaa02fece82ff1e17828f41989f90dbbb154d1913176325bcfac8d0fa8ce0a80e884a31c9074a8580fac7715572e319ba63b8f4b6b4cdd7a9","ssdeep":"","tlshash":"7041e8afd84ef8507c64cd9f043e6f62c5d5d8b380321838e75dd9a905b243b07a98a1","size":1904,"data":"","first_seen":"2026-01-11T01:55:53.604927Z","last_seen":"2026-01-11T02:03:05.571054Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"marulabet.com/","fqdn":"marulabet.com","domain":"marulabet.com","tld":"com"},"ip":{"addr":"104.21.14.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"234d954b230e4016fc48575661b52d6b","sha1":"b7d4117397aee2f6a53fc08ebdb0df5b4ac8f15a","sha256":"0a32fe20155024c291afc4eb7e0db7a43b06769549bb278d80dd4b5cde949469","sha512":"7ec1d12f494c453607b6a77be50579505344c43c3ab2bc1c38c90c8ede893d560adb43672bab5b420e1f121e34f9dc64c62b2ddab06a14ba3a6e3409cc857944","ssdeep":"","tlshash":"28f05270b04236e1c6a2226848373e0216be222774095800f74fe2606b7aa2b439360a","size":485,"data":"","first_seen":"2025-12-31T07:43:06.467239Z","last_seen":"2026-01-11T02:03:05.572417Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"marulabet.com/","fqdn":"marulabet.com","domain":"marulabet.com","tld":"com"},"ip":{"addr":"104.21.14.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"75284404f49518872c3d639e44ed7aa8","sha1":"18d995056423aa3fca07ac9d436616081f82a2c0","sha256":"7a0600a02b3275f8dd7dbedfe1b7ef0910cbdeb65b50b207ff1cb266cceaa0a4","sha512":"dc1cfdf43b4c63ccd0314b701fc0b972f02811f11e2631810bae8cac28eef82d1267da9f651b25b7137631c1ec046dc48a3d9e6f714f05a2fb00099e8e40e811","ssdeep":"","tlshash":"8e41e8afd84fe8507c64cddf043e6f6285d5d8b380325838e75dd9a905b243b17a98a1","size":1905,"data":"","first_seen":"2026-01-11T01:55:53.605803Z","last_seen":"2026-01-11T02:03:05.574297Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"marulabet.com/","fqdn":"marulabet.com","domain":"marulabet.com","tld":"com"},"ip":{"addr":"104.21.14.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"57a4661250320af597e251a2fcc794f7","sha1":"9d50c5beed03ad9b300fd67e0f3e2ba316477bed","sha256":"31412c082dd1224db5f32cfd5a6da6c77c737fc22a96f325010b43936aa20265","sha512":"e3fc23f0202efae0a65c451570d1942b0577d5b398cb34249b72b691cdb38117b297cc1eece7f33759f10062351cd97f84b45a5f04b7587163bb971c5b44a3b8","ssdeep":"","tlshash":"9c41e8afd84ee8507c64cddf043e6f62c5d5d8b380321838e75dd9a905b243b07a98a1","size":1902,"data":"","first_seen":"2026-01-11T01:55:53.606653Z","last_seen":"2026-01-11T02:03:05.575787Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"marulabet.com/_next/static/chunks/a4aca8c1a0878363.js","fqdn":"marulabet.com","domain":"marulabet.com","tld":"com"},"ip":{"addr":"104.21.14.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"5fbc11e10b58feaaf2b0ae7a8b2a76f1","sha1":"bd3d2ba3efb38b2c5dcb6d88755281b056eb9a72","sha256":"16ca85aad9ed0a2160ca4d285103dffcefbbbf5ed4789708b0e7a3413cda5388","sha512":"a8861f9f5687f4558dddbc4c02fd354cdf11e7d9b47f2a844584b21e1417e2d1a03602f6875e9bb3019d71cea1c4bad86907fcb434b4f0498656c4c5ef0f5e7a","ssdeep":"1536:eN29IxBQi6ha/rqj4gUnFZSul2PmOot685D:e5P6M2jDRuPn6+","tlshash":"09b3f7f935d5f48207ab40a6c03f0006f32c4d37189e68a0a3e5ddda756499de1b3faa","size":111515,"data":"","first_seen":"2025-12-31T07:43:06.427962Z","last_seen":"2026-01-11T02:03:05.462845Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"marulabet.com/","fqdn":"marulabet.com","domain":"marulabet.com","tld":"com"},"ip":{"addr":"104.21.14.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"ddec9c44fec3df8531956d4d2abf2c1c","sha1":"4ee283592fe7d13d097586f787b18422ceb22247","sha256":"27bf7cd75a68170d95b099afd003e004d85292611a4aba8f368e4378a278404d","sha512":"980c3f6efec04db7dfd3f89b1e408d3f3c08471fbf449cf349d01e90578be36b50afccb1a9b21ed4f04a38c852b4b9747f8f8af3dfe8f328e84e535c23a646fb","ssdeep":"","tlshash":"c541e8afe84ee8507c65cddf043e6f62c5d5d8b380321838e75dd9a905b243b17a98a1","size":1907,"data":"","first_seen":"2026-01-11T01:55:53.607607Z","last_seen":"2026-01-11T02:03:05.5773Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"marulabet.com/","fqdn":"marulabet.com","domain":"marulabet.com","tld":"com"},"ip":{"addr":"104.21.14.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"264ffdf21aa2789542fbdec888a713c7","sha1":"9eb231b44bf129bd81e851aca36a165959328aa6","sha256":"966336744d76a5fbd234819dfd92aeeb801917c239d0b4dcff3b23d1b2d088ec","sha512":"e330a49e56ebfb4e79f5be74cd0130ff7e38fe13d2c61a11539c2c490d5bf8049f0763c8b1b70ff4b445ae2eda0dcef624d46e42866d524e738d4468af4416e4","ssdeep":"","tlshash":"5941e8afd80ef8507c64cd9f053e6f63c5d5d8b380321878e75dd9a905b243b07a98a2","size":1905,"data":"","first_seen":"2026-01-11T01:55:53.608405Z","last_seen":"2026-01-11T02:03:05.57839Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"marulabet.com/_next/static/chunks/22b2d1508dc2e8f0.js","fqdn":"marulabet.com","domain":"marulabet.com","tld":"com"},"ip":{"addr":"104.21.14.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"49df7c7b3e62153815f3cb5ac73aad46","sha1":"1c19ff29be1a081ab3c15cf67e3bd1173ad43607","sha256":"72a09495bb2499cce711fb66e4ac014f2622e0eb50b77e57500d6089b8a8d4f8","sha512":"8c9e5d79e1523f356c21863da3872cb185fa55acf7d453f2dc3982fd6a44ada5d5c3d547ddc16ca61add329f2d278255da511b185fa83afaf3cbcae28c6251a5","ssdeep":"","tlshash":"c671b4c801155bdce1b601a4ad3ec00ee0592ebdce5e9839b4fc78751e22481be99fca","size":3557,"data":"","first_seen":"2026-01-11T01:55:53.41615Z","last_seen":"2026-01-11T02:03:05.41721Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"marulabet.com/","fqdn":"marulabet.com","domain":"marulabet.com","tld":"com"},"ip":{"addr":"104.21.14.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"afff051c345b684aa48288e911666ad7","sha1":"5b61235a194534e360a92932adec6c92a13a34f7","sha256":"7d7eaf5089fb0dfadf9d6cb6e6d5b8be50f6c184f216c1038c9b7ca5876b2261","sha512":"fd7976a3b742169bc23fddcae55879f517597f4cdb463f33e0494904067bcc017805ad1776029c5bad0f94a6e703ca7c7a22a6c470b3270910c5fcfa61d8b3a1","ssdeep":"","tlshash":"7941e8afe80ee8507864cddf043e6f62c5d5d8b780321838e75dd9a905b243b07a98a1","size":1899,"data":"","first_seen":"2026-01-11T01:55:53.609435Z","last_seen":"2026-01-11T02:03:05.579387Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"marulabet.com/_next/static/chunks/bfaef4f153c341cc.js","fqdn":"marulabet.com","domain":"marulabet.com","tld":"com"},"ip":{"addr":"104.21.14.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"700c37d6f9fb14fdde5cb280ba899bf5","sha1":"4f2b3cd20ac35c12b60981336a1f9fe85aec1318","sha256":"898dd0b934d9719b5e25558f78bdab79a32e4573340258808ef778190c14c9cf","sha512":"453efaddc08c0f06c257b3d8997a68826d877be7d7cf45ff5b334e19116462ab1ceb93b3db663ecff4f9facd13f6ff5c40bcf44021cf694fa86af40c21ccba51","ssdeep":"96:GuqtV5keo+Ejny4gF8963m1D+OZB7RM7WV0erBWAyI:HI6g89amlzzF","tlshash":"03b155e37b5832b828c911642e6ba113925c363f31cf94b49b4dc5e0d6cac98f66345f","size":5225,"data":"","first_seen":"2026-01-11T01:55:53.554661Z","last_seen":"2026-01-11T02:03:05.364897Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"marulabet.com/","fqdn":"marulabet.com","domain":"marulabet.com","tld":"com"},"ip":{"addr":"104.21.14.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"20467446ff327a2d1dd7da0e19f54f60","sha1":"78f96c8543ce4fa0f31a2d90e258033c7117acaf","sha256":"321224e0a6571c70956c64c6849fa9dd57889c40296fe8762057dc12b5e96e50","sha512":"e6034128bcabd5ed718777cbfc47baf81c616372db958c735b138d68483bb2d6fe72270413fedbac0071c90d98259eda19ed6753c5cb7669e792e75f9d9e2481","ssdeep":"","tlshash":"b6b01224b00ecc4fa5263d0b3f391e0101bc104b14466e0862d0d40c11438396e02ecc","size":104,"data":"","first_seen":"2026-01-11T01:55:53.610315Z","last_seen":"2026-01-11T02:03:05.580267Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"marulabet.com/","fqdn":"marulabet.com","domain":"marulabet.com","tld":"com"},"ip":{"addr":"104.21.14.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"3a27e2cf447e80e077dc8b1dc3c2816b","sha1":"b6230d4a108ce719b4e8b91a8f4fe5b121549f0c","sha256":"e63c46d82c9bc8ce8af8f46fd52ba6bdea8c6753df8f00006e427384002ae395","sha512":"d169f8d4692928b937e9c8bcb36625b68f0095c34aa8f013cbfcd00f93941d7652b4b65f072a6af2b00ecfa13b18de7c63d12d7f6610606d51f29676d67a4659","ssdeep":"96:L4Us8Es3lWhaJTZWCL2XWbvn4VAYcMPWjF6HChdWQExWMx9HrMyt5+Q:FEecaRiWbzIHCmXxVAQN","tlshash":"a1c1536ca51dd86dc98f5d4a0a3e1d39224f94bb23998ff4c69dce2441868bcdb93cc0","size":5633,"data":"","first_seen":"2026-01-11T02:03:05.581146Z","last_seen":"2026-01-11T02:03:05.581146Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"marulabet.com/","fqdn":"marulabet.com","domain":"marulabet.com","tld":"com"},"ip":{"addr":"104.21.14.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"cd9d0fb1860d25d8a2c1f60a1fbdf7dc","sha1":"16e60f2eeb95edd884dc5a95bdcbf0ff84aa1cb0","sha256":"ad6ab9d14cd4c54f3f032b9b4dd200fa933a8c5a1df923b5ad13074a6c0930d0","sha512":"5c45def9ada092906cfe2e5eac361bc32b05000525b953a7058d6ef708cfec96123fe09afcc4a46c5d652381e8ec6bf14019c93fc4fa1196533f30a8b8ef3de2","ssdeep":"","tlshash":"7ff08cb6c00ccc55be5a3d09583d3c57948d82cb00d98fbac285cf585342c3ebb4ad80","size":506,"data":"","first_seen":"2026-01-11T02:03:05.582415Z","last_seen":"2026-01-11T02:03:05.582415Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"marulabet.com/","fqdn":"marulabet.com","domain":"marulabet.com","tld":"com"},"ip":{"addr":"104.21.14.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"5dc1494199755de72648f35c18729610","sha1":"0187e60c98b80e59e6d8f1955196c931f7932bfa","sha256":"05a475721e324a3ab6fd41c0ba3a69793f905a76946a012a33eaa8e85298ac45","sha512":"b26ba8e118fa1be16def9d78a8957321d9919af44079f59b27739db93c691ff8350cec19a50fcbe90c6e2c92d29f9f1f5d7cb67b094b659ba8dcadf1b8ee6e21","ssdeep":"","tlshash":"7a41e9afd80ef8507865cddf043e6f63c5d9d8b380321838e75dd99945b243b17a98a1","size":1944,"data":"","first_seen":"2026-01-11T01:55:53.614968Z","last_seen":"2026-01-11T02:03:05.584473Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"marulabet.com/","fqdn":"marulabet.com","domain":"marulabet.com","tld":"com"},"ip":{"addr":"104.21.14.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"9c79d62f557defce4c4c55b12e92c387","sha1":"0130b2318ec228ef9857de72dea16e53429700fc","sha256":"219b6264a41408cefe35862ec0373d67ba08b17f301aac7a6cbae529a010c40e","sha512":"e846b49dea97c178a081b12b712f4da1669f69da22b3fda76496ce46261098076944a421817cae21a6ad52764f12e17803357e97a0f6edaa5eefae8135608e00","ssdeep":"","tlshash":"e141f8afd80ef8507864cdcf043e6f62c5d4d8b380325838e75ddaa905b243b07a98a1","size":1910,"data":"","first_seen":"2026-01-11T01:55:53.615863Z","last_seen":"2026-01-11T02:03:05.585645Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"marulabet.com/","fqdn":"marulabet.com","domain":"marulabet.com","tld":"com"},"ip":{"addr":"104.21.14.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"cbf89f93643bde77f1a42b20b7aa4b20","sha1":"0a149ced46b0df0a7106b46d2c013b787e24d389","sha256":"d797c2255ede2cfbcaf8829f073737154e2d44a574e9515dd10a02218835afd8","sha512":"9cb0a7f09706264d23a46d6e04d89824fe6cec6c4f0d7e8a2c72adaca8f587ce8b0e2ec2fc3210e4d7c25627cbcfae4af163fde9f31347492086b36111030177","ssdeep":"","tlshash":"ab9002a931c2e0009a533364505f18cc5074c47024854981845494a15c65024521a85c","size":47,"data":"","first_seen":"2023-04-12T06:31:27Z","last_seen":"2026-08-05T13:59:13.498447Z","times_seen":26043,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"marulabet.com/op1.js?v=1.1.2","fqdn":"marulabet.com","domain":"marulabet.com","tld":"com"},"ip":{"addr":"104.21.14.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"7e70a945dae20db5c3ba723775ded1fb","sha1":"881446882a8156d42ef4bb0fd07b514bfea3015a","sha256":"3c8dd924bfde73ec39e5872541bbe103809a55eeb3ba96b6fb9ebf75799f38df","sha512":"391c68f9e017a8cb850c48d4aabcde7cb82c08dc48b3c555ac5c0b9b0085588dbdaad393bfb785064b603f0dfe55d8fb1baf77c3f24ce2015b06b8214ab16761","ssdeep":"96:3JTLJ3+YlrT6yyP0mjnGzmLBHd4Lbgm+tpUQAl:3B1O6yPRjG6lHd4/gm+tJC","tlshash":"e8a197e772de35b24bfa70d6d1613443f7281aa5280a101cb758addb148890ae3e6fb4","size":4780,"data":"","first_seen":"2025-02-07T08:54:17.669398Z","last_seen":"2026-01-11T02:03:05.304338Z","times_seen":98,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"marulabet.com/_next/static/chunks/b56bfb8753f2111d.js","fqdn":"marulabet.com","domain":"marulabet.com","tld":"com"},"ip":{"addr":"104.21.14.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"5e68a13c76892f30a85efabb13d82ca1","sha1":"966afd56bd2dd10ac30443a969c57de7820276eb","sha256":"143ac296f86033ddcd6f04439e75754aef4136412b75872a710be987fd05f423","sha512":"7efb5a92b6fb9e7cf28fe24b78c7cd93aaa393bbf28dad89e0445c7790de25405e6caf21dbba8602c134dc70d37361234d9425cb1487dee4b6e331616451ac12","ssdeep":"384:u2HyPM3ojR4oAQgGTH1BS8UEHMupcS3hHgrhiiGE6oSmLSpfz7SG2n6:u2Hy4lCHdMup3hHOiiGN54Spfz126","tlshash":"b2d2c7e33112f4728adfe2efa0a70466a33d26189409453c7d7a9d8d326d6447297f3b","size":29045,"data":"","first_seen":"2026-01-11T01:55:53.570094Z","last_seen":"2026-02-19T17:02:28.73521Z","times_seen":73,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"marulabet.com/","fqdn":"marulabet.com","domain":"marulabet.com","tld":"com"},"ip":{"addr":"104.21.14.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"24f5da4f9ae7a99b97992362428b67b5","sha1":"19be6c6622e6f1f16fe95e884d6681c6909f36ea","sha256":"702e6ddc5dfc15d4861ee5609f4d082ee0e57843c776b8c0ece60e96b9c14560","sha512":"f6e3713663bf80810dda0c4f98dfed4d50dabbeb1b0c803c206b67b33df06cdf01fb56272de9658314a37b37a92082c300df07d2b35dd8f52ae362123f424f57","ssdeep":"","tlshash":"8741e8afe80ee8507865cddf053e6f63c6d5d8b780321838e75ddda905b243b07a98a1","size":1904,"data":"","first_seen":"2026-01-11T01:55:53.616653Z","last_seen":"2026-01-11T02:03:05.587581Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"marulabet.com/","fqdn":"marulabet.com","domain":"marulabet.com","tld":"com"},"ip":{"addr":"104.21.14.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"2bdc947b228956c4509bdbebad0b9f33","sha1":"848a6d4ac97dc14b8da614ac08e8be09a04626a6","sha256":"367caeb44fafa3991e0ed8e6df84f6b5d0589c47024b7b0e6dfc6c7538694abc","sha512":"ad6c15d2a4675f690ad7d5c4dc0968ac7bc1c65f8f6f33c8ce0ecf998f440659aa9fc4888e4c2d80c52b7f0ba8f078e7ade58f424e5360a1603b549f396a4380","ssdeep":"96:L3Z/L5QXqI2WkSV+FdyVWXroLwHXUWHWqWQQlWOFh:ZiV+FdBoLYuX","tlshash":"6f910f7ca149d56cdc9b5f4806790c7aa6cfe8fb33848764cb8dcc39498a07cd69b880","size":4521,"data":"","first_seen":"2026-01-11T02:03:05.588593Z","last_seen":"2026-01-11T02:03:05.588593Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"marulabet.com/_next/static/chunks/eee013d4993c1ed0.js","fqdn":"marulabet.com","domain":"marulabet.com","tld":"com"},"ip":{"addr":"104.21.14.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"864f184b964f45fcf781703f93b51157","sha1":"f008a220eb2b14e86031eb77560f3902027db3fb","sha256":"99dbdeb1ae3bb2bf5f05d8e6aaa85790a532fa0ac803f50600d8c3709dadc509","sha512":"8190b73c41e24999f19c7657ff073ba2478153e5ece2f9a4c38d3784722727ab894d934025112f3c40977546eeb28ac7aaa06495a6e828078d96495fa9899f8c","ssdeep":"384:AvujK1iTCMsJ9oWuniaoJQdmAmQvSezeFXkdJfWn0MfzO4uE7gj+WHGENcWB9YdL:AvMCJ9oWuniaoJQdmAmQvSecnAv62veJ","tlshash":"59b2e8bc32117411db8710a9c0ef4d06e12e65b6220e8465b2be9caf25b5cdd50bbb7f","size":25102,"data":"","first_seen":"2026-01-11T01:55:53.571028Z","last_seen":"2026-01-11T02:03:05.459015Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"marulabet.com/_next/static/chunks/011580f10f4ad012.js","fqdn":"marulabet.com","domain":"marulabet.com","tld":"com"},"ip":{"addr":"104.21.14.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"f30d84933455cde025ef22dcc2f5489d","sha1":"2d4afca4c6ee72bf70c8d873f27c581859d26e58","sha256":"28b7874276ad41be73d5ff7014d462501813892dba2ec859243060beaf1d5ed5","sha512":"7538a74e798c205a1788f78167ec14171e558809b214dba88ffb0aed9e536743b5ad3928283116259226e43c330b335a525571a654c53da64b10db297f669c24","ssdeep":"96:/+ypIazyOIIX7wuIOR7xk5fCWhmwa0H0cr5ErFRoj7I4lEsShWKUiivc9vV/gXhV:/vmIwu78ffap6igj7hxSkZiHV/EP1X","tlshash":"03e1b7c613a0429cd5864768ef339850731fa47f7aaed9c48a8fcba4b14b8d4f603859","size":7104,"data":"","first_seen":"2026-01-11T01:55:53.527681Z","last_seen":"2026-01-11T02:03:05.235852Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"marulabet.com/","fqdn":"marulabet.com","domain":"marulabet.com","tld":"com"},"ip":{"addr":"104.21.14.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"9a94f923e8c5b896b4e3c895eb4c7879","sha1":"096fac41ed470eb5b9b0aab62a47d7caead3f7e4","sha256":"56958e4e180460202f3e185a6a69712dcc540ee4d88256ddcb8482283c364c6f","sha512":"e4c418e4cc5be31d97176e1dba0fd42032d7526a3e97167a8b25675233435071980e40f4136851d5c3b6d923fa5a58af7ec6aad56074fa6a4286ac1ff203198e","ssdeep":"","tlshash":"cb510f3db609da6adcaf6d15453e9c3a10ced4ab03d4ce64c6ccce24564607c6b92dc0","size":2766,"data":"","first_seen":"2026-01-11T02:03:05.590231Z","last_seen":"2026-01-11T02:03:05.590231Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"marulabet.com/_next/static/chunks/699d240ba76ab6e7.js","fqdn":"marulabet.com","domain":"marulabet.com","tld":"com"},"ip":{"addr":"104.21.14.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"fb3634cf9dbe461ce7b21964ef674642","sha1":"5be5159bc385567dce6e3ac8a821c4628079c72b","sha256":"4ef0b88dfe9e08a67e8361b199e7c5c0267fb4b0ec83ade00c6ca9d55f131d58","sha512":"a512adef8a10ff7d93d6fee4920da94225ddc9f03872b0b2d991ba8ed14cb6b136ebc6382dd9924f7a1c84f8b6a98ecba6dea9e484f774878da9fd576d27336d","ssdeep":"384:CeEJQfhNlOuEi1z9J9TvpiIuy7A7QKGwpRCSNBcAoU8bs541hAblbH36AxVeNyYi:CSN6y8QKGwamoUh541U9XarEqM3","tlshash":"8a03e9c5b320606243d651a384b50203f329a999540a455cbb7ceeffa97cec971f6f72","size":40939,"data":"","first_seen":"2026-01-11T01:55:53.435896Z","last_seen":"2026-02-19T17:02:28.60695Z","times_seen":73,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"marulabet.com/_next/static/chunks/bc00dbd968053a62.js","fqdn":"marulabet.com","domain":"marulabet.com","tld":"com"},"ip":{"addr":"104.21.14.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"54063eb7b6a4e8845b7b5621d59393f2","sha1":"1dd66c0341da2e2046839b93e596e940817f6422","sha256":"c1bf519ba156ca7fb4bfed64075ee0b668cc32cce0f8a00f4ce720371dee3bc7","sha512":"07eb929ac5488c8b066a963b55d92a1d4146f1f6ebfc87e977e602a7faa1c8943511f3c785b04d6e0aad2e89d14d567e6d641a9cd476de66590be4d7d2248a49","ssdeep":"768:e6OHRgDFZ92YskdtAO/rx4soJY0W07sXlAa7Kht+DLN1AbgnnqD+hH:HOHRgDFZc4tAsv0h62gL39nqa1","tlshash":"bc632ae63351b462d3db5196c4ae8501a27a59e4240c083c75fdddeb3822c8962fbf7e","size":67579,"data":"","first_seen":"2026-01-11T01:55:53.442527Z","last_seen":"2026-02-19T17:02:28.647339Z","times_seen":73,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"marulabet.com/","fqdn":"marulabet.com","domain":"marulabet.com","tld":"com"},"ip":{"addr":"104.21.14.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"f113e266733e504535604e3ed3dad608","sha1":"e11fa5b52fd227565688abfc6de9eb02e7246614","sha256":"b03de560a8d04d0fff931e9042102d12ebbbc14da0965886eb8509d7d902dcff","sha512":"296cab90d6667943b37408d710fd650ac20c1e1eff7ccdf90fe3f40934c94376f44de96d29c4ac75a0301ab0d8df5cd7c36cdc0c86017fc1fa92b526da456acc","ssdeep":"","tlshash":"ee41e9afd80bf8507865cddf047e6f6285d5d8b380321838e79dd9a905b243b07a98a1","size":1905,"data":"","first_seen":"2026-01-11T02:03:05.591625Z","last_seen":"2026-01-11T02:03:05.591625Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"marulabet.com/_next/static/chunks/5106befed02bbbc1.js","fqdn":"marulabet.com","domain":"marulabet.com","tld":"com"},"ip":{"addr":"104.21.14.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"8118195f240294632123017ad2da8fd6","sha1":"4ca6934b48835fc835973be4d7767bcc76587a88","sha256":"893322fffa21a1dc9aa44ea2772fbd71d34f610e7a6a3eb20e4b1c83a81f18ac","sha512":"b066520de5f3fac2a5abdd6d25ec8b2b0a9a61178885c5dc862cddf13cea9cf1fc420971c23c178c27fe2fb3f0ffb0dbabefe405b1351d8b48e1a922869af4b1","ssdeep":"384:nw11UKxDFEhGbyy4RmOCYV3jv47bYS6B8v6vaEw3fgvm1waDSe297zL:nwcIWKyy4RhBcw8i+3fgvm1waDv2BzL","tlshash":"f7e21ba03251f0354b6b8146e0be4355f33a5616a40f403cb2bd5ced3266e8972a7ffa","size":31186,"data":"","first_seen":"2026-01-11T01:55:53.425162Z","last_seen":"2026-01-11T02:03:05.314119Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"marulabet.com/_next/static/chunks/8d97a31a2b7bb52b.js","fqdn":"marulabet.com","domain":"marulabet.com","tld":"com"},"ip":{"addr":"104.21.14.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"7a6782562784798052f56f3f546edd76","sha1":"5ca984010f470a582d3d61937aa02edd1f2895cc","sha256":"eff3ee36a789baceced46592cfdf60b6b5c83bf5d7031b9e7789b45ba2e99314","sha512":"cd75a77848a365e4580e7897c2c9f6ce89280556a892969406e4219da7dac8e1d56ddb9578ed3b04593af3ba8a141294203fcc2a3366261d661ede7ac6ee41f8","ssdeep":"768:0VfQIsNtn3lErrOfQHL099txV8zlutf8uTpfQlTWH228qz9x/:kQXxSrS9LV8s8u9QIl","tlshash":"6e237484b7a5b02947a25191045b544bf278f938a4cc18acf360e4f628baddad4fff74","size":49842,"data":"","first_seen":"2026-01-11T01:55:53.523305Z","last_seen":"2026-02-19T17:02:28.656397Z","times_seen":73,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"marulabet.com/_next/static/chunks/0086609c4b45b46a.js","fqdn":"marulabet.com","domain":"marulabet.com","tld":"com"},"ip":{"addr":"104.21.14.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"fc9886ef696d06ff5fff4ef75aca4bd1","sha1":"2cfcf905752c66882e2dce10ee68c3fee7feef61","sha256":"246b7d86430e932d357cbea32d51fd4513b2bbe42f53e12199a9dee6102f15c7","sha512":"fa15e6b658bf0cf3473cc585637432f9fbdbd6dcc44cd4bd505dd037fd9c2688968e8a74a69d6aa0e0346bfed6c254c59b9c849a468d0b829c2d4a3e57464d19","ssdeep":"","tlshash":"7f3160445550a6ae742500fc903b400e64a61fb9c31daf32e0bc387b26619c9be267db","size":1733,"data":"","first_seen":"2026-01-11T01:55:53.418747Z","last_seen":"2026-01-11T02:03:05.312514Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"marulabet.com/","fqdn":"marulabet.com","domain":"marulabet.com","tld":"com"},"ip":{"addr":"104.21.14.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"3004a8f7824907dac848015afa8f5284","sha1":"8a5da5b72c8c2a1360af3922c031f688ab9cb770","sha256":"7901611f4f4f0e8c279c9118c44fbf3910e2b380ef9541f692d57e1805333782","sha512":"8e53db85a233ec93e6853622d4cae59c73fc1ba77c0d9d47bc43530fcb26b8bde47fcdfb3785ab3819a282a75cc70d0efa711e51ca7305639c8899c691a3c5a4","ssdeep":"","tlshash":"ecf0969dd049cd3bcd8e7f0a16fe2f3a490e009a0191ad9892e79c4e9413a34ab76505","size":569,"data":"","first_seen":"2026-01-11T02:03:05.593052Z","last_seen":"2026-01-11T02:03:05.593052Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"marulabet.com/terms?_rsc=1hqik","fqdn":"marulabet.com","domain":"marulabet.com","tld":"com"},"ip":{"addr":"104.21.14.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://marulabet.com/","date":"2026-01-11T02:02:24.493Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"marulabet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Dec 2025 13:13:09 GMT","end":"Mon, 30 Mar 2026 14:11:58 GMT"},"fingerprint":{"sha1":"FA:EA:E7:29:47:4D:0C:8A:97:DE:34:6B:B0:73:EC:0F:02:FE:A8:70","sha256":"70:01:CE:F8:9D:67:13:DC:31:37:03:2C:22:AB:68:81:D6:DE:0C:E8:5F:F1:92:32:46:D8:04:E1:9A:38:2E:AD"}}},"request":{"raw":"GET /terms?_rsc=1hqik HTTP/1.1\r\nHost: marulabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://marulabet.com/\r\nrsc: 1\r\nnext-router-prefetch: 1\r\nnext-router-segment-prefetch: /!KHVzZXItc2lkZSk/$d$M/second-design/!KGhvbWUp/terms\r\nnext-url: /marulabet.com%26blue%26en/second-design\r\nsentry-trace: 9ffef7b14fef40b3bd2e466e13219bb9-a4875a3c353451dc-0\r\nbaggage: sentry-environment=production,sentry-release=web%402.7.0,sentry-public_key=6d319d1014d598ea4a0365923853ee67,sentry-trace_id=9ffef7b14fef40b3bd2e466e13219bb9,sentry-sampled=false,sentry-sample_rand=0.22013458521750728,sentry-sample_rate=0.1\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 11 Jan 2026 02:02:24 GMT\r\ncontent-type: text/x-component\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nx-nextjs-rewritten-path: /marulabet.com\u0026blue\u0026en/second-design/terms\r\nx-middleware-rewrite: /marulabet.com\u0026blue\u0026en/second-design/terms?_rsc=1hqik\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch, Accept-Encoding\r\nx-nextjs-cache: HIT\r\nx-nextjs-prerender: 1\r\nx-nextjs-postponed: 2\r\ncache-control: s-maxage=600, stale-while-revalidate=31535400\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ugVFmEd00hd1aPomBAmSueg6u1VTHaC7FgiDJ75y58vVvLj5tpt1KKcWYlKUPFb69A0O3ZS41BDUDcYi%2BhIB17E7B1WkGp1CkzfG\"}]}\r\ncf-ray: 9bc0d4ef18e456ae-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":520,"size_decoded":0,"mime_type":"text/x-component","magic":"ASCII text","md5":"cae286cc5150ca9e140002b466382032","sha1":"808cbc33e587c522661c3a71f7c9a2f4593ee43c","sha256":"9349b2186e1004b44bee7c066fdd6957343d7d566c713868881e88769e334aa7","sha512":"b1c732329240455085c84a12e473d8986e5fe1abc1fcf0e71e30fe2312ae09bc31d5e4c37944b3427ae36b99e276ee07fdb591a051fc9b39959ce970274a3b7e","ssdeep":"","tlshash":"1af027a3d40dee291d3dcc8c0e5e6363855d8c7fdab12ab992acce6c068513a1b496c0","first_seen":"2026-01-11T01:55:53.415353Z","last_seen":"2026-01-11T02:03:05.218009Z","times_seen":2,"resource_available":false,"data":null}},"time_used":90,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":90,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-11","alert":"Sinkholed","trigger":"marulabet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"marulabet.com/vip?_rsc=t45ii","fqdn":"marulabet.com","domain":"marulabet.com","tld":"com"},"ip":{"addr":"104.21.14.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://marulabet.com/","date":"2026-01-11T02:02:24.842Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"marulabet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Dec 2025 13:13:09 GMT","end":"Mon, 30 Mar 2026 14:11:58 GMT"},"fingerprint":{"sha1":"FA:EA:E7:29:47:4D:0C:8A:97:DE:34:6B:B0:73:EC:0F:02:FE:A8:70","sha256":"70:01:CE:F8:9D:67:13:DC:31:37:03:2C:22:AB:68:81:D6:DE:0C:E8:5F:F1:92:32:46:D8:04:E1:9A:38:2E:AD"}}},"request":{"raw":"GET /vip?_rsc=t45ii HTTP/1.1\r\nHost: marulabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://marulabet.com/\r\nrsc: 1\r\nnext-router-prefetch: 1\r\nnext-router-segment-prefetch: /!KHVzZXItc2lkZSk/$d$M/second-design/!KGhvbWUp/vip/__PAGE__\r\nnext-url: /marulabet.com%26blue%26en/second-design\r\nsentry-trace: 9ffef7b14fef40b3bd2e466e13219bb9-811d251ffc3dd4f5-0\r\nbaggage: sentry-environment=production,sentry-release=web%402.7.0,sentry-public_key=6d319d1014d598ea4a0365923853ee67,sentry-trace_id=9ffef7b14fef40b3bd2e466e13219bb9,sentry-sampled=false,sentry-sample_rand=0.22013458521750728,sentry-sample_rate=0.1\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 11 Jan 2026 02:02:24 GMT\r\ncontent-type: text/x-component\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nx-nextjs-rewritten-path: /marulabet.com\u0026blue\u0026en/second-design/vip\r\nx-middleware-rewrite: /marulabet.com\u0026blue\u0026en/second-design/vip?_rsc=t45ii\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch, Accept-Encoding\r\nx-nextjs-cache: HIT\r\nx-nextjs-prerender: 1\r\nx-nextjs-postponed: 2\r\ncache-control: s-maxage=600, stale-while-revalidate=31535400\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=iVHXnUZoPa0zyPuFLL3jkpJkvyPMqVYwaV%2BCg6KRXyr7AX5wSoyVApaEYO5oGdigsXC4bwXCofhSuGOia7vwK5%2FRwQwVanrd4LrP\"}]}\r\ncf-ray: 9bc0d4f148fc56ae-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":19921,"size_decoded":0,"mime_type":"text/x-component","magic":"ASCII text, with very long lines (5989)","md5":"be2bdead88ef98cdfd4871599e13001f","sha1":"dbe2046c84502f86036217cc39ed6fee79fcba41","sha256":"70d61f5acee28402d15d6f20ce259e2eda5df0c44eda88586db91b5db59d79e2","sha512":"fd069c508d748fc903d102609118dc70b889795806e82bf059dc0535802019768210630794540a7729a819ecd6baa3493f812013131ff087e7ff6f130c7fd43d","ssdeep":"192:dHK9tX7K9tXpK9tX5K9tXpsK9tXNK9tXSK9tX4BBdFnpYj6ux5G+kGux5c/XaGC3:1C7CpC5CuCNCSC4Bf2wKVCIJ134gU","tlshash":"a092086bd80eec641d75cc4c2c1fa76396d9c87389318ce8e75dcd9c129a42a1fae1e1","first_seen":"2026-01-11T02:03:05.221057Z","last_seen":"2026-01-11T02:03:05.221057Z","times_seen":1,"resource_available":false,"data":null}},"time_used":93,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":92,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-11","alert":"Sinkholed","trigger":"marulabet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"marulabet.com/group/table?_rsc=1ss1o","fqdn":"marulabet.com","domain":"marulabet.com","tld":"com"},"ip":{"addr":"104.21.14.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://marulabet.com/","date":"2026-01-11T02:02:25.054Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"marulabet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Dec 2025 13:13:09 GMT","end":"Mon, 30 Mar 2026 14:11:58 GMT"},"fingerprint":{"sha1":"FA:EA:E7:29:47:4D:0C:8A:97:DE:34:6B:B0:73:EC:0F:02:FE:A8:70","sha256":"70:01:CE:F8:9D:67:13:DC:31:37:03:2C:22:AB:68:81:D6:DE:0C:E8:5F:F1:92:32:46:D8:04:E1:9A:38:2E:AD"}}},"request":{"raw":"GET /group/table?_rsc=1ss1o HTTP/1.1\r\nHost: marulabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://marulabet.com/\r\nrsc: 1\r\nnext-router-prefetch: 1\r\nnext-router-segment-prefetch: /!KHVzZXItc2lkZSk/$d$M/second-design/!KGhvbWUp/group/$d$group/__PAGE__\r\nnext-url: /marulabet.com%26blue%26en/second-design\r\nsentry-trace: 9ffef7b14fef40b3bd2e466e13219bb9-8825f46e0bc699ea-0\r\nbaggage: sentry-environment=production,sentry-release=web%402.7.0,sentry-public_key=6d319d1014d598ea4a0365923853ee67,sentry-trace_id=9ffef7b14fef40b3bd2e466e13219bb9,sentry-sampled=false,sentry-sample_rand=0.22013458521750728,sentry-sample_rate=0.1\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 11 Jan 2026 02:02:25 GMT\r\ncontent-type: text/x-component\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nx-nextjs-rewritten-path: /marulabet.com\u0026blue\u0026en/second-design/group/table\r\nx-middleware-rewrite: /marulabet.com\u0026blue\u0026en/second-design/group/table?_rsc=1ss1o\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch, Accept-Encoding\r\nx-nextjs-cache: HIT\r\nx-nextjs-prerender: 1\r\nx-nextjs-postponed: 2\r\ncache-control: s-maxage=600, stale-while-revalidate=31535400\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=sRwbw0745dO37NOzrfAVoJejnoGUoVjpfq5LsaFbirS4fmY4QrqtVJAqHABCeX0joQ5%2Bl8%2F%2B58Xux6ZuqgKIyt1OMSK3LYBEi7OY\"}]}\r\ncf-ray: 9bc0d4f2990856ae-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7534,"size_decoded":0,"mime_type":"text/x-component","magic":"Unicode text, UTF-8 text, with very long lines (5253)","md5":"b3fec52315f518d333a8dbb5d16447d7","sha1":"b9b2e4b77fcc808154569871e7dfcb2220acf6fb","sha256":"bd952416dcdfbaa188459148b4ccf67c5bbffa9fd7597680eeb07b9b5fb38115","sha512":"de6bf18d80b657de2af4a94a23e58b9355ab793d41baeb80f77bdc351afaff59880229f94cbf6ea931a2138e7058ec734c3c85f6080f2d00ebcfb8757716df5d","ssdeep":"48:WjjCIA1SNVkb2+kumcYFm9b629IOlUikSSu2FWnoTecdyzXToZMt476v+CASTot1:W8K9tXeyge+Qw8rjTVrB6hx4AhVXUIwv","tlshash":"c6f126b6c416dc984a1eaf0824cb2e0af0ad1d3365d40ca8ba0dee6cd44dc579b4b297","first_seen":"2026-01-11T01:55:53.46892Z","last_seen":"2026-01-11T02:03:05.224007Z","times_seen":2,"resource_available":false,"data":null}},"time_used":146,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":146,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-11","alert":"Sinkholed","trigger":"marulabet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"marulabet.com/group/slots?_rsc=1jkk3","fqdn":"marulabet.com","domain":"marulabet.com","tld":"com"},"ip":{"addr":"104.21.14.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://marulabet.com/","date":"2026-01-11T02:02:25.290Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"marulabet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Dec 2025 13:13:09 GMT","end":"Mon, 30 Mar 2026 14:11:58 GMT"},"fingerprint":{"sha1":"FA:EA:E7:29:47:4D:0C:8A:97:DE:34:6B:B0:73:EC:0F:02:FE:A8:70","sha256":"70:01:CE:F8:9D:67:13:DC:31:37:03:2C:22:AB:68:81:D6:DE:0C:E8:5F:F1:92:32:46:D8:04:E1:9A:38:2E:AD"}}},"request":{"raw":"GET /group/slots?_rsc=1jkk3 HTTP/1.1\r\nHost: marulabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://marulabet.com/\r\nrsc: 1\r\nnext-router-prefetch: 1\r\nnext-router-segment-prefetch: /_head\r\nnext-url: /marulabet.com%26blue%26en/second-design\r\nsentry-trace: 9ffef7b14fef40b3bd2e466e13219bb9-854c761a00aaa175-0\r\nbaggage: sentry-environment=production,sentry-release=web%402.7.0,sentry-public_key=6d319d1014d598ea4a0365923853ee67,sentry-trace_id=9ffef7b14fef40b3bd2e466e13219bb9,sentry-sampled=false,sentry-sample_rand=0.22013458521750728,sentry-sample_rate=0.1\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 11 Jan 2026 02:02:25 GMT\r\ncontent-type: text/x-component\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nx-nextjs-rewritten-path: /marulabet.com\u0026blue\u0026en/second-design/group/slots\r\nx-middleware-rewrite: /marulabet.com\u0026blue\u0026en/second-design/group/slots?_rsc=1jkk3\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch, Accept-Encoding\r\nx-nextjs-cache: HIT\r\nx-nextjs-prerender: 1\r\nx-nextjs-postponed: 2\r\ncache-control: s-maxage=600, stale-while-revalidate=31535400\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=upMqa1qmAfzrRDNMO8GEGRCrArBZWnuItKJg1raw2bzUNXS1lvIfs0Y2TV0rR30uz%2By%2Bltaz0tYGF4mkDCwHXXbB3fQGdVLYZaNM\"}]}\r\ncf-ray: 9bc0d4f4191c56ae-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1965,"size_decoded":0,"mime_type":"text/x-component","magic":"ASCII text, with very long lines (1444)","md5":"6c421767d164700bb202c9c9dc5a75f1","sha1":"3307eee16bcd0354b14a8bc46fe024d0cfa83dc8","sha256":"1bde8df6c6a1bdd59c977fe118261690fa64a378821417905e1f73dc387b07a4","sha512":"da5bff3cd87a9f3e0299e5382e754348a6ae99f592871f64568466c98ff9a5a02dfcad92dcce2da0a0da9f42d2d0612d95ab29e1815cc95b53a6e4a04ad84467","ssdeep":"","tlshash":"f2410f7a880cec8e5a67c959086ff31a160d1677c6701e7adaaccd0e19c602e5f60f90","first_seen":"2026-01-11T02:03:05.226237Z","last_seen":"2026-01-11T02:03:05.226237Z","times_seen":1,"resource_available":false,"data":null}},"time_used":95,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":94,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-11","alert":"Sinkholed","trigger":"marulabet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"marulabet.com/_next/static/media/Inter_Medium-s.p.93090983.ttf","fqdn":"marulabet.com","domain":"marulabet.com","tld":"com"},"ip":{"addr":"104.21.14.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://marulabet.com/","date":"2026-01-11T02:02:20.353Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"marulabet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Dec 2025 13:13:09 GMT","end":"Mon, 30 Mar 2026 14:11:58 GMT"},"fingerprint":{"sha1":"FA:EA:E7:29:47:4D:0C:8A:97:DE:34:6B:B0:73:EC:0F:02:FE:A8:70","sha256":"70:01:CE:F8:9D:67:13:DC:31:37:03:2C:22:AB:68:81:D6:DE:0C:E8:5F:F1:92:32:46:D8:04:E1:9A:38:2E:AD"}}},"request":{"raw":"GET /_next/static/media/Inter_Medium-s.p.93090983.ttf HTTP/1.1\r\nHost: marulabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://marulabet.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 11 Jan 2026 02:02:20 GMT\r\ncontent-type: font/ttf\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Thu, 25 Dec 2025 14:07:50 GMT\r\netag: W/\"6476c-19b55d65af0\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jsI8Zne9kbZ3suQbH%2B%2BTSnf0CtPDkYlSu7ftruTVuuR49EZ0Q%2Bb3INT%2FGxyvFGJokFUl35Ab28mlfVC%2Bv%2BSCPKv8tjtxF2m9O6Ab\"}]}\r\ncf-ray: 9bc0d4d4bffe56ae-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":411500,"size_decoded":0,"mime_type":"font/ttf","magic":"TrueType Font data, 17 tables, 1st \"GDEF\", 39 names, Microsoft, language 0x409, Copyright 2016 The Inter Project AuthorsInter MediumRegular4.000;git-a52131595;RSMS;Inter-Medium","md5":"a473e623af12065b4b9cb8db4068fb9c","sha1":"126d31d9fbb0d742763c266a1c2ace71b106e34a","sha256":"1bda81124d6ae26ed16a7201e2bd93766af5a3b14faf79eea14d191ebbd41146","sha512":"1fbc2841783140fe54f3ab1fa84e1ded2534bcec3549ade2f513491b32178df515bd63a0a4a2c35017a6850ff9c3a24f8602357d912acf8ca92b8d68ba846d3a","ssdeep":"6144:D0RV3jlWkDOh9oC2wuhsJWPziKSQlRiFy34YmkCD9oI0+msvMlwt5BO2x28YzWDQ:D9SxC2wuhDPziK2yIYmkCCIPmsHI8F8","tlshash":"48945a17e706db0ece562d34cbf587d033a9bc91781ad247b16a3a19ce931b40ad71e2","first_seen":"2024-07-29T21:54:32Z","last_seen":"2026-08-04T16:44:03.3249Z","times_seen":283,"resource_available":false,"data":null}},"time_used":231,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":84,"receive":147,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-11","alert":"Sinkholed","trigger":"marulabet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"marulabet.com/_next/static/chunks/e3d00364d13321ed.js","fqdn":"marulabet.com","domain":"marulabet.com","tld":"com"},"ip":{"addr":"104.21.14.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://marulabet.com/","date":"2026-01-11T02:02:20.392Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"marulabet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Dec 2025 13:13:09 GMT","end":"Mon, 30 Mar 2026 14:11:58 GMT"},"fingerprint":{"sha1":"FA:EA:E7:29:47:4D:0C:8A:97:DE:34:6B:B0:73:EC:0F:02:FE:A8:70","sha256":"70:01:CE:F8:9D:67:13:DC:31:37:03:2C:22:AB:68:81:D6:DE:0C:E8:5F:F1:92:32:46:D8:04:E1:9A:38:2E:AD"}}},"request":{"raw":"GET /_next/static/chunks/e3d00364d13321ed.js HTTP/1.1\r\nHost: marulabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://marulabet.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 11 Jan 2026 02:02:20 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Sat, 27 Dec 2025 18:15:15 GMT\r\netag: W/\"4753-19b61059738\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ueso5HoMbuAXb79OvqBH7HmGAnBjr8QsNqTtoC7kbdwuGhjGrTLjIq9o9j9K3SGLAvHFjmI2Kd8%2F5yt6S3UAX6F80fEmCzdzcSgK\"}]}\r\ncf-ray: 9bc0d4d4e81556ae-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":18259,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (9993)","md5":"2486934aebd0b00e55e68b6dfbe9d0fe","sha1":"848dbefe394be98e044928f1374fb59929c92f93","sha256":"11380db3ba8aec5597b4cde9773951510aa89424968a8c7435db112f37901b0d","sha512":"807a83e35db9c4bc646787d3a154bf2e80e386daafb9fd97ea6059fbde48bbc924847a8108bf120b524c4edccc89acd8e5139ae522a1a2655a29dc720a4df54c","ssdeep":"192:uF1HgFrAHRNiN/Rv3cGggerToWWeoedmPWo21UCS+94eNSIOEPZJJb1I+7mTH47C:YHgcRNiN/ojfoWpHmt21u+9vdmTHS5W","tlshash":"1382b6ea7282f0b197bb10a2c07f400bf2793565245d4054e7a6c8ef74f056e86a7f7a","first_seen":"2026-01-11T01:55:53.455045Z","last_seen":"2026-02-19T17:02:28.7957Z","times_seen":73,"resource_available":true,"data":null}},"time_used":112,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":77,"receive":35,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-11","alert":"Sinkholed","trigger":"marulabet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"marulabet.com/second-design/ranks/platinum5.webp","fqdn":"marulabet.com","domain":"marulabet.com","tld":"com"},"ip":{"addr":"104.21.14.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://marulabet.com/","date":"2026-01-11T02:02:23.811Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"marulabet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Dec 2025 13:13:09 GMT","end":"Mon, 30 Mar 2026 14:11:58 GMT"},"fingerprint":{"sha1":"FA:EA:E7:29:47:4D:0C:8A:97:DE:34:6B:B0:73:EC:0F:02:FE:A8:70","sha256":"70:01:CE:F8:9D:67:13:DC:31:37:03:2C:22:AB:68:81:D6:DE:0C:E8:5F:F1:92:32:46:D8:04:E1:9A:38:2E:AD"}}},"request":{"raw":"GET /second-design/ranks/platinum5.webp HTTP/1.1\r\nHost: marulabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://marulabet.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 11 Jan 2026 02:02:23 GMT\r\ncontent-type: image/webp\r\ncontent-length: 9316\r\npriority: u=4,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Sat, 27 Dec 2025 17:40:05 GMT\r\netag: W/\"2464-19b60e56679\"\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CQg%2Fzwxa81D5IZjBxGtqU6%2BB0y7m2OzpcpdPDycC2OgZ1Hmc7hqoxj1zMfN%2FdzhzLJCr5Pop9AGUprUBlkl%2B5edzdPFNlTx9Xgvn\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9bc0d4eab8be56ae-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9316,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"e39a29122513d2ccb49632724b56de0e","sha1":"66e55190bac1ccecb9346477a4e39fa08fac7ed4","sha256":"56dc4713aaa433ec4d423ff8c5080fb1cae997e9140f4aa800ed95f906dbffd0","sha512":"2e7b525d7d726f5c7e9e65f1282befaddb63a3be59d94249068bcdd54ff2ef10b9ae287f127dc5139f82641bd99a1ae973d56eb7634fd976dc0809eccc4016e8","ssdeep":"192:oK4FPabxOsSw5Dek5/a1IMKonmtKaZXeUVgBY7v+xwDvjgN2LxN0:WFCFZK6MfmtKsXeChUsu","tlshash":"9e12afa86aac13c454e4faf53464951e0d8e23c6d7e626e4e29c8b6669f13d27b340d0","first_seen":"2026-01-11T01:55:53.468122Z","last_seen":"2026-02-19T17:02:28.811392Z","times_seen":41,"resource_available":false,"data":null}},"time_used":74,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":73,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-11","alert":"Sinkholed","trigger":"marulabet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"marulabet.com/about-us?_rsc=r54j0","fqdn":"marulabet.com","domain":"marulabet.com","tld":"com"},"ip":{"addr":"104.21.14.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://marulabet.com/","date":"2026-01-11T02:02:22.426Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"marulabet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Dec 2025 13:13:09 GMT","end":"Mon, 30 Mar 2026 14:11:58 GMT"},"fingerprint":{"sha1":"FA:EA:E7:29:47:4D:0C:8A:97:DE:34:6B:B0:73:EC:0F:02:FE:A8:70","sha256":"70:01:CE:F8:9D:67:13:DC:31:37:03:2C:22:AB:68:81:D6:DE:0C:E8:5F:F1:92:32:46:D8:04:E1:9A:38:2E:AD"}}},"request":{"raw":"GET /about-us?_rsc=r54j0 HTTP/1.1\r\nHost: marulabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://marulabet.com/\r\nrsc: 1\r\nnext-router-prefetch: 1\r\nnext-router-segment-prefetch: /_tree\r\nnext-url: /marulabet.com%26blue%26en/second-design\r\nsentry-trace: 9ffef7b14fef40b3bd2e466e13219bb9-a9dbaeba657a4187-0\r\nbaggage: sentry-environment=production,sentry-release=web%402.7.0,sentry-public_key=6d319d1014d598ea4a0365923853ee67,sentry-trace_id=9ffef7b14fef40b3bd2e466e13219bb9,sentry-sampled=false,sentry-sample_rand=0.22013458521750728,sentry-sample_rate=0.1\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 11 Jan 2026 02:02:22 GMT\r\ncontent-type: text/x-component\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nx-nextjs-rewritten-path: /marulabet.com\u0026blue\u0026en/second-design/about-us\r\nx-middleware-rewrite: /marulabet.com\u0026blue\u0026en/second-design/about-us?_rsc=r54j0\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch, Accept-Encoding\r\nx-nextjs-cache: HIT\r\nx-nextjs-prerender: 1\r\nx-nextjs-postponed: 2\r\ncache-control: s-maxage=600, stale-while-revalidate=31535400\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=M2GPnqjkorMG8h1V08KSXLKtUUz6cyjnNKR4z6bjzqrXvdH4Tm6wyT9CC0%2FQzwlZyCDfcNgUfuhUwHlxvYSl37PvR5RFGpOOvf9r\"}]}\r\ncf-ray: 9bc0d4e2288056ae-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2461,"size_decoded":0,"mime_type":"text/x-component","magic":"ASCII text, with very long lines (952)","md5":"09370b5d88f595c07c25fc18411cf227","sha1":"9517ba203c8d6e3b2edee761f8d87bf94f82b15d","sha256":"71d8771f43322fadd680f220f2361271a1c272c1e1b515f060a781215a7727ea","sha512":"738419e43d7b71aedba060e0eec2385ad97d59eee1d8000ce8a2e45ed1f31d4fc51ddc14448917c17e52489a4f7bd6eea9fa06cc72dcd1ee78c2ad0e525b5b0b","ssdeep":"","tlshash":"08519e0cc8499db498c9d59961d5d7016658af3bf1b88dace04bdc64038f03d0beab87","first_seen":"2026-01-11T02:03:05.233792Z","last_seen":"2026-01-11T02:03:05.233792Z","times_seen":1,"resource_available":false,"data":null}},"time_used":152,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":152,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-11","alert":"Sinkholed","trigger":"marulabet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"marulabet.com/_next/static/chunks/011580f10f4ad012.js","fqdn":"marulabet.com","domain":"marulabet.com","tld":"com"},"ip":{"addr":"104.21.14.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://marulabet.com/","date":"2026-01-11T02:02:20.421Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"marulabet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Dec 2025 13:13:09 GMT","end":"Mon, 30 Mar 2026 14:11:58 GMT"},"fingerprint":{"sha1":"FA:EA:E7:29:47:4D:0C:8A:97:DE:34:6B:B0:73:EC:0F:02:FE:A8:70","sha256":"70:01:CE:F8:9D:67:13:DC:31:37:03:2C:22:AB:68:81:D6:DE:0C:E8:5F:F1:92:32:46:D8:04:E1:9A:38:2E:AD"}}},"request":{"raw":"GET /_next/static/chunks/011580f10f4ad012.js HTTP/1.1\r\nHost: marulabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://marulabet.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 11 Jan 2026 02:02:20 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Wed, 07 Jan 2026 17:32:54 GMT\r\netag: W/\"1bc0-19b9984c570\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JJzPVsfYHOoAV4OLQyEV9uhvOlsWQx6gC8r51N7zozzYN8MheIC7LDFNSqsxok5nMSguRJAU2PFfBsYt4UwfsuRkez29CPaVoZd0\"}]}\r\ncf-ray: 9bc0d4d5082856ae-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7104,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (6747)","md5":"f30d84933455cde025ef22dcc2f5489d","sha1":"2d4afca4c6ee72bf70c8d873f27c581859d26e58","sha256":"28b7874276ad41be73d5ff7014d462501813892dba2ec859243060beaf1d5ed5","sha512":"7538a74e798c205a1788f78167ec14171e558809b214dba88ffb0aed9e536743b5ad3928283116259226e43c330b335a525571a654c53da64b10db297f669c24","ssdeep":"96:/+ypIazyOIIX7wuIOR7xk5fCWhmwa0H0cr5ErFRoj7I4lEsShWKUiivc9vV/gXhV:/vmIwu78ffap6igj7hxSkZiHV/EP1X","tlshash":"03e1b7c613a0429cd5864768ef339850731fa47f7aaed9c48a8fcba4b14b8d4f603859","first_seen":"2026-01-11T01:55:53.527681Z","last_seen":"2026-01-11T02:03:05.235852Z","times_seen":2,"resource_available":true,"data":null}},"time_used":92,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":78,"receive":14,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-11","alert":"Sinkholed","trigger":"marulabet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"marulabet.com/_next/static/media/Inter_Regular-s.p.b62ab84d.ttf","fqdn":"marulabet.com","domain":"marulabet.com","tld":"com"},"ip":{"addr":"104.21.14.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://marulabet.com/","date":"2026-01-11T02:02:20.355Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"marulabet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Dec 2025 13:13:09 GMT","end":"Mon, 30 Mar 2026 14:11:58 GMT"},"fingerprint":{"sha1":"FA:EA:E7:29:47:4D:0C:8A:97:DE:34:6B:B0:73:EC:0F:02:FE:A8:70","sha256":"70:01:CE:F8:9D:67:13:DC:31:37:03:2C:22:AB:68:81:D6:DE:0C:E8:5F:F1:92:32:46:D8:04:E1:9A:38:2E:AD"}}},"request":{"raw":"GET /_next/static/media/Inter_Regular-s.p.b62ab84d.ttf HTTP/1.1\r\nHost: marulabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://marulabet.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 11 Jan 2026 02:02:20 GMT\r\ncontent-type: font/ttf\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Thu, 25 Dec 2025 14:07:50 GMT\r\netag: W/\"63610-19b55d65af0\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=guG53uzN7pLk3cBwXb3fu9Fj0LFWRYdoLO4HDtLhX2AMBwtttODHGoVdbclrldy8IR%2BZS3Fg7nMZPIdA8Fu%2FzQzmgYa9cLXrbFYC\"}]}\r\ncf-ray: 9bc0d4d4bfff56ae-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":407056,"size_decoded":0,"mime_type":"font/ttf","magic":"TrueType Font data, 17 tables, 1st \"GDEF\", 35 names, Microsoft, language 0x409, Copyright 2016 The Inter Project AuthorsInterRegular4.000;git-a52131595;RSMS;Inter-RegularInter ","md5":"fdb50e0d48cdcf775fa1ac0dc3c33bd4","sha1":"5c95e5d66572aeca303512ba41a8dde0cea92c80","sha256":"64f8be6e55c37e32ef03da99714bf3aa58b8f2099bfe4f759a7578e3b8291123","sha512":"20ce8100c96058d4e64a12d0817b7ce638cec9f5d03651320eb6b9c3f47ee289ccc695bd3b5b6bf8e0867cdab0ebb6e8cae77df054e185828a6a13f3733ede53","ssdeep":"6144:sSnv4lXwF22mZ8JWPziKSQUmeKGVOOxAdgwH9evDFDynor51EOO2UAGbzxSr1w7b:sSvJ22mZzPziKwLOOkvH9IQoUf7P08","tlshash":"30845a17e70ad70ede452e308af987c133b9bca1785a924bb59e3a58dd971f409cb0d0","first_seen":"2024-07-29T21:54:32Z","last_seen":"2026-08-04T16:44:03.355061Z","times_seen":490,"resource_available":false,"data":null}},"time_used":220,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":56,"receive":164,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-11","alert":"Sinkholed","trigger":"marulabet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"marulabet.com/_next/static/media/Roboto_Bold-s.p.1734e663.ttf","fqdn":"marulabet.com","domain":"marulabet.com","tld":"com"},"ip":{"addr":"104.21.14.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://marulabet.com/","date":"2026-01-11T02:02:20.358Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"marulabet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Dec 2025 13:13:09 GMT","end":"Mon, 30 Mar 2026 14:11:58 GMT"},"fingerprint":{"sha1":"FA:EA:E7:29:47:4D:0C:8A:97:DE:34:6B:B0:73:EC:0F:02:FE:A8:70","sha256":"70:01:CE:F8:9D:67:13:DC:31:37:03:2C:22:AB:68:81:D6:DE:0C:E8:5F:F1:92:32:46:D8:04:E1:9A:38:2E:AD"}}},"request":{"raw":"GET /_next/static/media/Roboto_Bold-s.p.1734e663.ttf HTTP/1.1\r\nHost: marulabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://marulabet.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 11 Jan 2026 02:02:20 GMT\r\ncontent-type: font/ttf\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Wed, 07 Jan 2026 18:59:37 GMT\r\netag: W/\"28da8-19b99d429a8\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wDqiBLdbiA1cM7%2FUOxjLaB3yQsP6RP4MMz3XQZCMFvDEU0iQVZC22pY11XEIsCuaZejY9V70RLIhO5oyXRledL5J7KdpjOua3tke\"}]}\r\ncf-ray: 9bc0d4d4b80156ae-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":167336,"size_decoded":0,"mime_type":"font/ttf","magic":"TrueType Font data, 18 tables, 1st \"GDEF\", 13 names, Microsoft, language 0x409, Copyright 2011 Google Inc. All Rights Reserved.RobotoBoldRoboto BoldVersion 2.137; 2017Roboto-Bo","md5":"b8e42971dec8d49207a8c8e2b919a6ac","sha1":"62442a18a9fe9457c1afeabf683d263a691b7798","sha256":"ec685a46105296fe46c8744da4a11cf8118ba6c11271941766f7a546df6aa7c7","sha512":"3bd40ac788d44626fd640ec67ef04ab0364816b5e8c831f2077bff8805cfe6890ca29274b476f933f6e96ddaa16f4e2f3f66c616dff7cd88cdcaff7dae8ca5e5","ssdeep":"3072:VBa9dX3CyiSB1/R7O0aXjC1YHeA9bOuPUPT9mYZK9K4N09PJ4X4HXYXXXXXXLnqT:uX6XiuMPT/eK9cnfST80/","tlshash":"29f3f501d2479629cac6b2787c3cd3be1970e429bc6ba11735e4af3149c8945ec69bfc","first_seen":"2023-04-11T21:48:33Z","last_seen":"2026-08-05T08:30:11.9236Z","times_seen":6328,"resource_available":false,"data":null}},"time_used":199,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":85,"receive":114,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-11","alert":"Sinkholed","trigger":"marulabet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"marulabet.com/_next/static/chunks/09bcf53934cf48b9.css","fqdn":"marulabet.com","domain":"marulabet.com","tld":"com"},"ip":{"addr":"104.21.14.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://marulabet.com/","date":"2026-01-11T02:02:20.369Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"marulabet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Dec 2025 13:13:09 GMT","end":"Mon, 30 Mar 2026 14:11:58 GMT"},"fingerprint":{"sha1":"FA:EA:E7:29:47:4D:0C:8A:97:DE:34:6B:B0:73:EC:0F:02:FE:A8:70","sha256":"70:01:CE:F8:9D:67:13:DC:31:37:03:2C:22:AB:68:81:D6:DE:0C:E8:5F:F1:92:32:46:D8:04:E1:9A:38:2E:AD"}}},"request":{"raw":"GET /_next/static/chunks/09bcf53934cf48b9.css HTTP/1.1\r\nHost: marulabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://marulabet.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 11 Jan 2026 02:02:20 GMT\r\ncontent-type: text/css; charset=UTF-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=orMvcBhXZXD2CY9i07LlL%2BwOc1kNrkcYLOik2LGhlP5fctdicrOfbAGH6vD%2FHJyGkuzZP1yBPH9Ewegj7NiUgmi584xpPB09tpjd\"}]}\r\npriority: u=2,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: br\r\nlast-modified: Sat, 22 Nov 2025 20:44:06 GMT\r\netag: W/\"93-19aad4f49f0\"\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9bc0d4d4c80756ae-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":147,"size_decoded":0,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text","md5":"4f335c221d5e283df96fc6b4a2e8775c","sha1":"44169cf280b27a325f85cb86c9c79f26ea4807cc","sha256":"75151e853588fa94ddadf82b7e4442554a7cfb03eb34dd45896004ffc7ea5c9f","sha512":"7683594dc8582aeb0af1fc6105d9c25c31638dce4a62cc3ef14f140bf1e4ffad6ee7b0aab3b4c613f05a575d384acf404af28b75679a66a5dcb41773640dd3cd","ssdeep":"","tlshash":"e2c002cc938927120487a6d23aa0e5e1c13ef1c1bab984cd21a9754ac3466550186646","first_seen":"2025-11-23T22:59:50.462528Z","last_seen":"2026-07-27T09:20:16.816463Z","times_seen":82,"resource_available":false,"data":null}},"time_used":84,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":84,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-11","alert":"Sinkholed","trigger":"marulabet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"marulabet.com/_next/static/chunks/876d3bd1a990218b.js","fqdn":"marulabet.com","domain":"marulabet.com","tld":"com"},"ip":{"addr":"104.21.14.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://marulabet.com/","date":"2026-01-11T02:02:20.380Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"marulabet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Dec 2025 13:13:09 GMT","end":"Mon, 30 Mar 2026 14:11:58 GMT"},"fingerprint":{"sha1":"FA:EA:E7:29:47:4D:0C:8A:97:DE:34:6B:B0:73:EC:0F:02:FE:A8:70","sha256":"70:01:CE:F8:9D:67:13:DC:31:37:03:2C:22:AB:68:81:D6:DE:0C:E8:5F:F1:92:32:46:D8:04:E1:9A:38:2E:AD"}}},"request":{"raw":"GET /_next/static/chunks/876d3bd1a990218b.js HTTP/1.1\r\nHost: marulabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://marulabet.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 11 Jan 2026 02:02:20 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Wed, 07 Jan 2026 17:32:54 GMT\r\netag: W/\"83edf-19b9984c570\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Fvv2o57YIAprb2X%2FMWB%2By3KuZ1hMBLn3jB13viXfKnGO%2FghxoEV2XHnavmAUpQgDRBdWAOwvAjcqe1OLLacOjAAHvU30I5opuSq9\"}]}\r\ncf-ray: 9bc0d4d4d80e56ae-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":540383,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (55790)","md5":"faf54271b54b485960c8baa83e2bb197","sha1":"35134d28e28c9b303b5cbddd4f0f5ec4851a8305","sha256":"7d30cd5b01ec5aa024656ea320ba517e0b9fbbb930ea5580c10d1f5dd043bf89","sha512":"d2854b278af4f4feb56f5d8a322f3346d61968bb55638a568625c34202e0b6c30ce46d9007ec37dd61101fe59bcbf9c1c85f5fcdcf39fcbe6bf78222753021de","ssdeep":"6144:D6qmUJ8sISU4Dg7aTg+AZHm/dXGNx5Qs/EVgRE7edfazljpsiU:qk3AZG/dXGNxfbUzNU","tlshash":"15b45bf93696b0335bb30266507b1402b338196b244e4864f365edde78a844ea1f7f7e","first_seen":"2026-01-11T01:55:53.423443Z","last_seen":"2026-01-11T02:03:05.240486Z","times_seen":2,"resource_available":true,"data":null}},"time_used":208,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":78,"receive":130,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-11","alert":"Sinkholed","trigger":"marulabet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"marulabet.com/api/bets/lastWinsNew?filter=all\u0026limit=10","fqdn":"marulabet.com","domain":"marulabet.com","tld":"com"},"ip":{"addr":"104.21.14.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://marulabet.com/","date":"2026-01-11T02:02:22.991Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"marulabet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Dec 2025 13:13:09 GMT","end":"Mon, 30 Mar 2026 14:11:58 GMT"},"fingerprint":{"sha1":"FA:EA:E7:29:47:4D:0C:8A:97:DE:34:6B:B0:73:EC:0F:02:FE:A8:70","sha256":"70:01:CE:F8:9D:67:13:DC:31:37:03:2C:22:AB:68:81:D6:DE:0C:E8:5F:F1:92:32:46:D8:04:E1:9A:38:2E:AD"}}},"request":{"raw":"GET /api/bets/lastWinsNew?filter=all\u0026limit=10 HTTP/1.1\r\nHost: marulabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://marulabet.com/\r\nContent-Type: application/json\r\nAuthorization: Bearer undefined\r\nsentry-trace: 9ffef7b14fef40b3bd2e466e13219bb9-a2bbc228fda79924-0\r\nbaggage: sentry-environment=production,sentry-release=web%402.7.0,sentry-public_key=6d319d1014d598ea4a0365923853ee67,sentry-trace_id=9ffef7b14fef40b3bd2e466e13219bb9,sentry-sampled=false,sentry-sample_rand=0.22013458521750728,sentry-sample_rate=0.1\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 11 Jan 2026 02:02:23 GMT\r\ncontent-type: application/json; charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=oShqXo3%2FqDgu8M2FBTjdoydzB99h0x4Dc0UPrA68NX7MzdLY5x2MaPSRXa%2FN4zzHro%2BActtZNaJGP%2BZ7lJNVrRjS6NvvIsmIQtWg\"}]}\r\npriority: u=4,i=?0\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\netag: W/\"92b-wkzZXg6y/hvWS721umPbHNsEKio\"\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9bc0d4e5b88d56ae-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":2347,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"a317a5a16d57f33257043fcd02631211","sha1":"c24cd95e0eb2fe1bd64bbdb5ba63db1cdb042a2a","sha256":"3230171b97363e3c1817cb7930e57b2f40268ddab27d8597bd7d95c0fc8d9262","sha512":"415c94efdf8fcd9a67cb8d87e94b74b56615149c6b1ebac574516ae91c8dce022e9e28d2646e4c9c1c867a920c91b3c79718a20b7ccdaa590e474a142a893cc8","ssdeep":"","tlshash":"9f417b3d65791cd491190dd2b1d33658aceca51b34c84da0866dcf3ee2e8855fe068f7","first_seen":"2026-01-11T02:03:05.242128Z","last_seen":"2026-01-11T02:03:05.242128Z","times_seen":1,"resource_available":false,"data":null}},"time_used":85,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":85,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-11","alert":"Sinkholed","trigger":"marulabet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"marulabet.com/api/bets/lastWinsNew?filter=highWins\u0026limit=10","fqdn":"marulabet.com","domain":"marulabet.com","tld":"com"},"ip":{"addr":"104.21.14.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://marulabet.com/","date":"2026-01-11T02:02:22.995Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"marulabet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Dec 2025 13:13:09 GMT","end":"Mon, 30 Mar 2026 14:11:58 GMT"},"fingerprint":{"sha1":"FA:EA:E7:29:47:4D:0C:8A:97:DE:34:6B:B0:73:EC:0F:02:FE:A8:70","sha256":"70:01:CE:F8:9D:67:13:DC:31:37:03:2C:22:AB:68:81:D6:DE:0C:E8:5F:F1:92:32:46:D8:04:E1:9A:38:2E:AD"}}},"request":{"raw":"GET /api/bets/lastWinsNew?filter=highWins\u0026limit=10 HTTP/1.1\r\nHost: marulabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://marulabet.com/\r\nContent-Type: application/json\r\nAuthorization: Bearer undefined\r\nsentry-trace: 9ffef7b14fef40b3bd2e466e13219bb9-9635edfed6ba9fa0-0\r\nbaggage: sentry-environment=production,sentry-release=web%402.7.0,sentry-public_key=6d319d1014d598ea4a0365923853ee67,sentry-trace_id=9ffef7b14fef40b3bd2e466e13219bb9,sentry-sampled=false,sentry-sample_rand=0.22013458521750728,sentry-sample_rate=0.1\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 11 Jan 2026 02:02:23 GMT\r\ncontent-type: application/json; charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BVCy0neZP8tbZkyycQEwoASV4cIvmcDI7%2F%2FO8OLSpjKylL8XsBSCx8wLnoEvXl%2BY6zByV%2FPQdbydK4AF67%2BTXTauZDHAu9qf8y%2FM\"}]}\r\npriority: u=4,i=?0\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\netag: W/\"931-Rc4YYMBHFIaswXE20J2Par+dOUE\"\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9bc0d4e5b88e56ae-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2353,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"86d53aad57c6e90f4381de9161d27120","sha1":"45ce1860c0471486acc17136d09d8f6abf9d3941","sha256":"d3b9c86710a1c7a7462ce110618baf6425d4aa7fdacf28464a971338c34ed9d5","sha512":"2e471ae254c3fb106641ae4215d216d0618322b30da42da94da00eaf6707a31b429de523c2da25ee95aa45433c5a9901128d17dbc13bfdea923d84e30130719a","ssdeep":"","tlshash":"dd418f3929bd1dd440195ec2e0d33718a8dc751724884da08abdcf3ea2e8956fe066fb","first_seen":"2026-01-11T02:03:05.244008Z","last_seen":"2026-01-11T02:03:05.244008Z","times_seen":1,"resource_available":false,"data":null}},"time_used":84,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":84,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-11","alert":"Sinkholed","trigger":"marulabet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"marulabet.com/icons/coinsIcons/usdt.svg","fqdn":"marulabet.com","domain":"marulabet.com","tld":"com"},"ip":{"addr":"104.21.14.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://marulabet.com/","date":"2026-01-11T02:02:21.001Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"marulabet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Dec 2025 13:13:09 GMT","end":"Mon, 30 Mar 2026 14:11:58 GMT"},"fingerprint":{"sha1":"FA:EA:E7:29:47:4D:0C:8A:97:DE:34:6B:B0:73:EC:0F:02:FE:A8:70","sha256":"70:01:CE:F8:9D:67:13:DC:31:37:03:2C:22:AB:68:81:D6:DE:0C:E8:5F:F1:92:32:46:D8:04:E1:9A:38:2E:AD"}}},"request":{"raw":"GET /icons/coinsIcons/usdt.svg HTTP/1.1\r\nHost: marulabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://marulabet.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 11 Jan 2026 02:02:21 GMT\r\ncontent-type: image/svg+xml\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Sat, 27 Dec 2025 17:40:04 GMT\r\netag: W/\"49d-19b60e563fd\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mkOx4X81TmWP%2B0U%2FBtCjl99V8ogM2ic4cCxmKyx8FnpdSowKLhJzfW5H8QPE%2Ff7yJ%2FNUptfDXVQtrj6R7XEb%2F1HfilK%2BuEhVNi%2B3\"}]}\r\ncf-ray: 9bc0d4d9284e56ae-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1181,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"3088682a6196704c6911b5abd252be23","sha1":"12f8e9c4ef8b86fbfe98c0344e3b2cc4526aba66","sha256":"e6e2945c6267c1c7ee592903b9f9285d5745459460174b5b3727e5370ab1d723","sha512":"01f7fbc286226916ae3dd32155f54294c5ba1aed88fc6cd6736477a47b5d87a2cdfe334f39766875db6b24299f4c6f82bef813ded16cddb592e304d6ee2b5cd5","ssdeep":"","tlshash":"9821fefd7acb91b8a848e0a4e73516d5321bb0fc45c50b14db56ef703d0841dd95b396","first_seen":"2026-01-11T01:55:53.550794Z","last_seen":"2026-05-31T04:22:22.32256Z","times_seen":4,"resource_available":false,"data":null}},"time_used":62,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":62,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-11","alert":"Sinkholed","trigger":"marulabet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"marulabet.com/favicon_2.ico","fqdn":"marulabet.com","domain":"marulabet.com","tld":"com"},"ip":{"addr":"104.21.14.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://marulabet.com/","date":"2026-01-11T02:02:21.116Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"marulabet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Dec 2025 13:13:09 GMT","end":"Mon, 30 Mar 2026 14:11:58 GMT"},"fingerprint":{"sha1":"FA:EA:E7:29:47:4D:0C:8A:97:DE:34:6B:B0:73:EC:0F:02:FE:A8:70","sha256":"70:01:CE:F8:9D:67:13:DC:31:37:03:2C:22:AB:68:81:D6:DE:0C:E8:5F:F1:92:32:46:D8:04:E1:9A:38:2E:AD"}}},"request":{"raw":"GET /favicon_2.ico HTTP/1.1\r\nHost: marulabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://marulabet.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 11 Jan 2026 02:02:21 GMT\r\ncontent-type: image/x-icon\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=6,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Sat, 27 Dec 2025 17:40:03 GMT\r\netag: W/\"423e-19b60e560c5\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=76LGBuRqfDS1csij5Nvbgok%2B8nG9wiFrH%2FnqvRBr8tAS1uY2R7T3m4j0Av2RzqpaliWWBXTEcDyIPCB1xL5%2BM5dDPixpzZmydRQO\"}]}\r\ncf-ray: 9bc0d4d9f85956ae-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":16958,"size_decoded":0,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 1 icon, 64x64, 32 bits/pixel","md5":"862625c18a78d2a3bebb3990ed8423b9","sha1":"8aee24aec86045963d43ece03ea0c14bf84db605","sha256":"52d8c3814a66882aeb937eaf0bffd819d7eacd69c955f34627a2753a645f4d76","sha512":"0ed2e082fbe2427cd903021e90a59106984919b00075bc99e49ab738a87204277b5353c14299c920755365083b2ede65436c0382f84a5acaa59495c9f36f0373","ssdeep":"192:oTEdnrvnSuNIa6yxthZ5Howi4lpoIhaOSvE+11:oMn7v6afyEW","tlshash":"5872dfedb1c30f87cdb57af0e12686414b620c7007587422617fb2abe267596ba0f94f","first_seen":"2025-03-15T18:38:34.505366Z","last_seen":"2026-08-04T16:44:03.33362Z","times_seen":123,"resource_available":false,"data":null}},"time_used":68,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":68,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-11","alert":"Sinkholed","trigger":"marulabet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"marulabet.com/_next/static/media/Inter_Medium-s.p.93090983.ttf","fqdn":"marulabet.com","domain":"marulabet.com","tld":"com"},"ip":{"addr":"104.21.14.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://marulabet.com/","date":"2026-01-11T02:02:21.671Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"marulabet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Dec 2025 13:13:09 GMT","end":"Mon, 30 Mar 2026 14:11:58 GMT"},"fingerprint":{"sha1":"FA:EA:E7:29:47:4D:0C:8A:97:DE:34:6B:B0:73:EC:0F:02:FE:A8:70","sha256":"70:01:CE:F8:9D:67:13:DC:31:37:03:2C:22:AB:68:81:D6:DE:0C:E8:5F:F1:92:32:46:D8:04:E1:9A:38:2E:AD"}}},"request":{"raw":"GET /_next/static/media/Inter_Medium-s.p.93090983.ttf HTTP/1.1\r\nHost: marulabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://marulabet.com/_next/static/chunks/a85c5f2112ae0905.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 11 Jan 2026 02:02:21 GMT\r\ncontent-type: font/ttf\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Thu, 25 Dec 2025 14:07:50 GMT\r\netag: W/\"6476c-19b55d65af0\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nage: 1424433\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=skAYdhJi9D%2F7XA%2F7W0JfnaQnMmRasU6sLqfxA8bTUGnSMYO6QPV9Kz0rHoSLRttsRKCenSk7ZLrq6kDK3oZQS9enpVFeEzesFrss\"}]}\r\ncf-ray: 9bc0d4dd786456ae-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":411500,"size_decoded":0,"mime_type":"font/ttf","magic":"TrueType Font data, 17 tables, 1st \"GDEF\", 39 names, Microsoft, language 0x409, Copyright 2016 The Inter Project AuthorsInter MediumRegular4.000;git-a52131595;RSMS;Inter-Medium","md5":"a473e623af12065b4b9cb8db4068fb9c","sha1":"126d31d9fbb0d742763c266a1c2ace71b106e34a","sha256":"1bda81124d6ae26ed16a7201e2bd93766af5a3b14faf79eea14d191ebbd41146","sha512":"1fbc2841783140fe54f3ab1fa84e1ded2534bcec3549ade2f513491b32178df515bd63a0a4a2c35017a6850ff9c3a24f8602357d912acf8ca92b8d68ba846d3a","ssdeep":"6144:D0RV3jlWkDOh9oC2wuhsJWPziKSQlRiFy34YmkCD9oI0+msvMlwt5BO2x28YzWDQ:D9SxC2wuhDPziK2yIYmkCCIPmsHI8F8","tlshash":"48945a17e706db0ece562d34cbf587d033a9bc91781ad247b16a3a19ce931b40ad71e2","first_seen":"2024-07-29T21:54:32Z","last_seen":"2026-08-04T16:44:03.3249Z","times_seen":283,"resource_available":false,"data":null}},"time_used":68,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":61,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-11","alert":"Sinkholed","trigger":"marulabet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"marulabet.com/games_new_webp/pragmatic-play-mysterious.webp","fqdn":"marulabet.com","domain":"marulabet.com","tld":"com"},"ip":{"addr":"104.21.14.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://marulabet.com/","date":"2026-01-11T02:02:23.815Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"marulabet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Dec 2025 13:13:09 GMT","end":"Mon, 30 Mar 2026 14:11:58 GMT"},"fingerprint":{"sha1":"FA:EA:E7:29:47:4D:0C:8A:97:DE:34:6B:B0:73:EC:0F:02:FE:A8:70","sha256":"70:01:CE:F8:9D:67:13:DC:31:37:03:2C:22:AB:68:81:D6:DE:0C:E8:5F:F1:92:32:46:D8:04:E1:9A:38:2E:AD"}}},"request":{"raw":"GET /games_new_webp/pragmatic-play-mysterious.webp HTTP/1.1\r\nHost: marulabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://marulabet.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 11 Jan 2026 02:02:23 GMT\r\ncontent-type: image/webp\r\ncontent-length: 31100\r\npriority: u=4,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Thu, 01 Jan 2026 18:08:31 GMT\r\netag: W/\"797c-19b7abf3918\"\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=f4Ves9pDKD%2BiFbA32PcK%2BmuEzQNSlwnj0ZnSvMoZkvaYWOlHKtzZXqQMAXuARBsHudg%2BQPywjhpFziEpt04TqgPnljKQsmPtIcDr\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9bc0d4eab8bb56ae-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":31100,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 408x546, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"f7463639eb7146b17b94a473448f7fe9","sha1":"72b5c127d545b71c034f73c98be52ff6fe90a63e","sha256":"d4cc5693179c5bda986e26c0840cf5d5cc56ae9b99ee42e2df8a6f924b7a0de5","sha512":"167ba31e6f6ca6dca98828a338b0784c08162e7378c32219f15530f64666a6aff5006d80917b48663ad0397369dfec785fa65e7b84b3f6226645dfe9fddb976d","ssdeep":"768:QixbYZ8Fi73H+m+5yndEJh4Ksjn6cqyzHoH0lMU6Mc8hSni4:QObYge3empn1djn6cq7HyMUTzP4","tlshash":"a9d2f1857e8ba3005778acb2f581764b3b545b1cae7b3e802ddde2687b09c4d7e68c50","first_seen":"2026-01-11T02:03:05.248231Z","last_seen":"2026-01-11T02:03:05.248231Z","times_seen":1,"resource_available":false,"data":null}},"time_used":74,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":70,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-11","alert":"Sinkholed","trigger":"marulabet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"marulabet.com/games_new_webp/pragmatic-play-temujin-treasures.webp","fqdn":"marulabet.com","domain":"marulabet.com","tld":"com"},"ip":{"addr":"104.21.14.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://marulabet.com/","date":"2026-01-11T02:02:26.449Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"marulabet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Dec 2025 13:13:09 GMT","end":"Mon, 30 Mar 2026 14:11:58 GMT"},"fingerprint":{"sha1":"FA:EA:E7:29:47:4D:0C:8A:97:DE:34:6B:B0:73:EC:0F:02:FE:A8:70","sha256":"70:01:CE:F8:9D:67:13:DC:31:37:03:2C:22:AB:68:81:D6:DE:0C:E8:5F:F1:92:32:46:D8:04:E1:9A:38:2E:AD"}}},"request":{"raw":"GET /games_new_webp/pragmatic-play-temujin-treasures.webp HTTP/1.1\r\nHost: marulabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://marulabet.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 11 Jan 2026 02:02:26 GMT\r\ncontent-type: image/webp\r\ncontent-length: 42426\r\npriority: u=4,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Thu, 01 Jan 2026 18:08:30 GMT\r\netag: W/\"a5ba-19b7abf3530\"\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yeQc%2FTxR%2FJ8cuRWdyqv8UTMX79MJOD5NbuCVxzK%2B113M9PkXjkh7%2B6aD8oBh5tiGT%2FGV2NJfDgPllqva0rxtvJCW8AYkS4i6%2Fk8M\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9bc0d4fb593056ae-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":42426,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"08ff75b4f9dd02333f8341485cf28a81","sha1":"7ef9b07e1778abd3cd80650b3ea5b7d811b8bb3c","sha256":"90618c12f129d63fe01c1696ee783fdf0eccd4c889d18209722d41ac48d8bd9b","sha512":"68702f6a90834120acc835688a52c3366a3ab0cfe0ef2d1e100f124108295f93452156dedac3526351c2506964ac5804e162d274bd761b46dd658727a8860516","ssdeep":"768:BfRv61ohRPI1nDQj2bnoDMi9eNG01/gaaxcYgrAe8GsPCqid+2KwhQqWsRPCztW:tRFhRA1UInoYNG019bYWWGsPyd+QhQ4z","tlshash":"1e13e166238edd04d16cb13a58e0e79bcfeb06e51eb4055afcdd8e452f952688cf010b","first_seen":"2026-01-11T02:03:05.250268Z","last_seen":"2026-01-11T02:03:05.250268Z","times_seen":1,"resource_available":false,"data":null}},"time_used":75,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":72,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-11","alert":"Sinkholed","trigger":"marulabet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"marulabet.com/","fqdn":"marulabet.com","domain":"marulabet.com","tld":"com"},"ip":{"addr":"104.21.14.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-01-11T02:02:19.725Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"marulabet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Dec 2025 13:13:09 GMT","end":"Mon, 30 Mar 2026 14:11:58 GMT"},"fingerprint":{"sha1":"FA:EA:E7:29:47:4D:0C:8A:97:DE:34:6B:B0:73:EC:0F:02:FE:A8:70","sha256":"70:01:CE:F8:9D:67:13:DC:31:37:03:2C:22:AB:68:81:D6:DE:0C:E8:5F:F1:92:32:46:D8:04:E1:9A:38:2E:AD"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: marulabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 11 Jan 2026 02:02:20 GMT\r\ncontent-type: text/html; charset=utf-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-middleware-rewrite: /marulabet.com\u0026blue\u0026en/second-design\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch, Accept-Encoding\r\nx-nextjs-cache: HIT\r\nx-nextjs-prerender: 1\r\nx-nextjs-stale-time: 300\r\nx-powered-by: Next.js\r\ncache-control: s-maxage=600, stale-while-revalidate=31535400\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=T28x1e5fwBbgNghgHJAbgo0InucdNEFt0NkRn2bB0uLwqNB0wZpb7gIO6S%2FlKyJ4z7lW%2BwMlogKlu7j2RusczZ4FggnyzmaPL0qs\"}]}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: 9bc0d4d19af956bf-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Next.js","description":"Next.js is a React framework for developing single page Javascript applications.","website":"https://nextjs.org","common_platform_enumeration":"cpe:2.3:a:zeit:next.js:*:*:*:*:*:*:*:*","icon":"Next.js.svg","categories":["JavaScript frameworks","Web frameworks"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"React","description":"React is an open-source JavaScript library for building user interfaces or UI components.","website":"https://reactjs.org","common_platform_enumeration":"cpe:2.3:a:facebook:react:*:*:*:*:*:*:*:*","icon":"React.svg","categories":["JavaScript frameworks"]},{"name":"Webpack","description":"Webpack is an open-source JavaScript module bundler.","website":"https://webpack.js.org/","common_platform_enumeration":"","icon":"Webpack.svg","categories":["Miscellaneous"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":180294,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (39030)","md5":"d3db256cbffeb2f74d1e68403329d610","sha1":"0b289ed8f54b9d25202a71fbf0ffc62d1184cf70","sha256":"e81483dd4b84e9cdf88c7df6a0116d677945522212009375c8e17e51ada0a4ab","sha512":"d41f607bd6cc4704365578daaf857644d38fcd9af8db723d4943f21102d7ff8d7d321930be00c50210f07b8b5862bb966a676afe73ebdda994bbcb2a6ede2a73","ssdeep":"3072:F9gLMI6MFBdJ0feJz6M/2yT+VvzryJUo/i2/kGhDLsTiD5:F5VQbvsTi1","tlshash":"a804302ee80ae911e867dd8e153f5f3790c9c8778135897ce79dca9c016287a5bdacc0","first_seen":"2026-01-11T02:03:05.252598Z","last_seen":"2026-01-11T02:03:05.252598Z","times_seen":1,"resource_available":false,"data":null}},"time_used":371,"timings":{"blocked":42,"dns":26,"connect":1,"send":0,"wait":279,"receive":0,"ssl":20},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-11","alert":"Sinkholed","trigger":"marulabet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"marulabet.com/_next/static/media/Inter_Bold-s.p.fbbe7604.ttf","fqdn":"marulabet.com","domain":"marulabet.com","tld":"com"},"ip":{"addr":"104.21.14.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://marulabet.com/","date":"2026-01-11T02:02:20.344Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"marulabet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Dec 2025 13:13:09 GMT","end":"Mon, 30 Mar 2026 14:11:58 GMT"},"fingerprint":{"sha1":"FA:EA:E7:29:47:4D:0C:8A:97:DE:34:6B:B0:73:EC:0F:02:FE:A8:70","sha256":"70:01:CE:F8:9D:67:13:DC:31:37:03:2C:22:AB:68:81:D6:DE:0C:E8:5F:F1:92:32:46:D8:04:E1:9A:38:2E:AD"}}},"request":{"raw":"GET /_next/static/media/Inter_Bold-s.p.fbbe7604.ttf HTTP/1.1\r\nHost: marulabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://marulabet.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 11 Jan 2026 02:02:20 GMT\r\ncontent-type: font/ttf\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Wed, 07 Jan 2026 18:59:37 GMT\r\netag: W/\"65560-19b99d429a8\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MR1TL1h%2FU%2BRLulT0toeJjCUVc7J2CEVuRcGLcESD0oQnzfkISEKvKqTG7t14iITToYaos5PrlGcM6RUX7dyPSjClKcS4SreAGGNO\"}]}\r\ncf-ray: 9bc0d4d4affc56ae-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":415072,"size_decoded":0,"mime_type":"font/ttf","magic":"TrueType Font data, 17 tables, 1st \"GDEF\", 35 names, Microsoft, language 0x409, Copyright 2016 The Inter Project AuthorsInterBold4.000;git-a52131595;RSMS;Inter-BoldInter BoldVe","md5":"8f2869a84ad71f156a17bb66611ebe22","sha1":"0325b9b3992fa2fdc9c715730a33135696c68a39","sha256":"0cb1bc1335372d9e3a0cf6f5311c7cce87af90d2a777fdeec18be605a2a70bc1","sha512":"3d4315d591dcf7609c15b3e32bcc234659fcdbe4be24aef5dba4ad248ad42fd9ab082250244f99dc801ec21575b7400aace50a1e8834d5c33404e76a0caac834","ssdeep":"12288:k9zC2w597PziK+bSvkK3sgUN8HkC48AeIVMhQ/8:e4iK+6I/8","tlshash":"ff946a1bf701e70eca562c388af59bd033b9bc91791ee24b705a3a09dd971b40ad71e4","first_seen":"2024-07-29T21:54:31Z","last_seen":"2026-08-04T16:44:03.325774Z","times_seen":329,"resource_available":false,"data":null}},"time_used":239,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":77,"receive":162,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-11","alert":"Sinkholed","trigger":"marulabet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"marulabet.com/api/bets/lastWinsNew?filter=luckyWins\u0026limit=10","fqdn":"marulabet.com","domain":"marulabet.com","tld":"com"},"ip":{"addr":"104.21.14.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://marulabet.com/","date":"2026-01-11T02:02:22.998Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"marulabet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Dec 2025 13:13:09 GMT","end":"Mon, 30 Mar 2026 14:11:58 GMT"},"fingerprint":{"sha1":"FA:EA:E7:29:47:4D:0C:8A:97:DE:34:6B:B0:73:EC:0F:02:FE:A8:70","sha256":"70:01:CE:F8:9D:67:13:DC:31:37:03:2C:22:AB:68:81:D6:DE:0C:E8:5F:F1:92:32:46:D8:04:E1:9A:38:2E:AD"}}},"request":{"raw":"GET /api/bets/lastWinsNew?filter=luckyWins\u0026limit=10 HTTP/1.1\r\nHost: marulabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://marulabet.com/\r\nContent-Type: application/json\r\nAuthorization: Bearer undefined\r\nsentry-trace: 9ffef7b14fef40b3bd2e466e13219bb9-aec601f71da12ea2-0\r\nbaggage: sentry-environment=production,sentry-release=web%402.7.0,sentry-public_key=6d319d1014d598ea4a0365923853ee67,sentry-trace_id=9ffef7b14fef40b3bd2e466e13219bb9,sentry-sampled=false,sentry-sample_rand=0.22013458521750728,sentry-sample_rate=0.1\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 11 Jan 2026 02:02:23 GMT\r\ncontent-type: application/json; charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=M4DbgB8oe%2FwAZHOXi%2BerEA5Acq%2FlTtBKvxvaOFzW%2FzZ3HqwssYSKH4hMEhY4FNV8SG1Wov43GsF%2BR%2B68we7yi5jsrmAphlZycoPz\"}]}\r\npriority: u=4,i=?0\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\netag: W/\"911-b1SyfAzuQEv9YsXPXbIzZszo0kc\"\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9bc0d4e5c88f56ae-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":2321,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"a2f7fda7f0a7ded4556edf51d95798bb","sha1":"6f54b27c0cee404bfd62c5cf5db23366cce8d247","sha256":"410ace629d461a7fee78ad2eea546ac85dff693dc0a36ecd9e92c4dc228d761c","sha512":"cb230f87cb04e83052c4e0867a9769c54f98a411c1194ce1dfe5bf887251c87dd02076cce55f1d45ce973d8001f88bd872ceba71e9895b3696b52799cc9e2111","ssdeep":"","tlshash":"9741b03969b90cd851294ad1f0d73444a8eca91724c84d908aadcf3ee3e8c5aed165fb","first_seen":"2026-01-11T02:03:05.256689Z","last_seen":"2026-01-11T02:03:05.256689Z","times_seen":1,"resource_available":false,"data":null}},"time_used":84,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":84,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-11","alert":"Sinkholed","trigger":"marulabet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"marulabet.com/providers?_rsc=1jmdp","fqdn":"marulabet.com","domain":"marulabet.com","tld":"com"},"ip":{"addr":"104.21.14.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://marulabet.com/","date":"2026-01-11T02:02:24.922Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"marulabet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Dec 2025 13:13:09 GMT","end":"Mon, 30 Mar 2026 14:11:58 GMT"},"fingerprint":{"sha1":"FA:EA:E7:29:47:4D:0C:8A:97:DE:34:6B:B0:73:EC:0F:02:FE:A8:70","sha256":"70:01:CE:F8:9D:67:13:DC:31:37:03:2C:22:AB:68:81:D6:DE:0C:E8:5F:F1:92:32:46:D8:04:E1:9A:38:2E:AD"}}},"request":{"raw":"GET /providers?_rsc=1jmdp HTTP/1.1\r\nHost: marulabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://marulabet.com/\r\nrsc: 1\r\nnext-router-prefetch: 1\r\nnext-router-segment-prefetch: /!KHVzZXItc2lkZSk/$d$M/second-design/!KGhvbWUp/providers\r\nnext-url: /marulabet.com%26blue%26en/second-design\r\nsentry-trace: 9ffef7b14fef40b3bd2e466e13219bb9-85f5100b96292134-0\r\nbaggage: sentry-environment=production,sentry-release=web%402.7.0,sentry-public_key=6d319d1014d598ea4a0365923853ee67,sentry-trace_id=9ffef7b14fef40b3bd2e466e13219bb9,sentry-sampled=false,sentry-sample_rand=0.22013458521750728,sentry-sample_rate=0.1\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 11 Jan 2026 02:02:25 GMT\r\ncontent-type: text/x-component\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nx-nextjs-rewritten-path: /marulabet.com\u0026blue\u0026en/second-design/providers\r\nx-middleware-rewrite: /marulabet.com\u0026blue\u0026en/second-design/providers?_rsc=1jmdp\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch, Accept-Encoding\r\nx-nextjs-cache: HIT\r\nx-nextjs-prerender: 1\r\nx-nextjs-postponed: 2\r\ncache-control: s-maxage=600, stale-while-revalidate=31535400\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rChSujAW4ZJO0BetquMEj9GcUN%2BokPDhCGRwwOPkHwh9WWrhwhvewKrZyqKo0tebQQCdhIg7j7fIG6prBmoVNFuMIaRcBjqxlxYN\"}]}\r\ncf-ray: 9bc0d4f1c8fe56ae-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":520,"size_decoded":0,"mime_type":"text/x-component","magic":"ASCII text","md5":"cae286cc5150ca9e140002b466382032","sha1":"808cbc33e587c522661c3a71f7c9a2f4593ee43c","sha256":"9349b2186e1004b44bee7c066fdd6957343d7d566c713868881e88769e334aa7","sha512":"b1c732329240455085c84a12e473d8986e5fe1abc1fcf0e71e30fe2312ae09bc31d5e4c37944b3427ae36b99e276ee07fdb591a051fc9b39959ce970274a3b7e","ssdeep":"","tlshash":"1af027a3d40dee291d3dcc8c0e5e6363855d8c7fdab12ab992acce6c068513a1b496c0","first_seen":"2026-01-11T01:55:53.415353Z","last_seen":"2026-01-11T02:03:05.218009Z","times_seen":2,"resource_available":false,"data":null}},"time_used":92,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":92,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-11","alert":"Sinkholed","trigger":"marulabet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"marulabet.com/_next/static/chunks/ddfd09fe5e4f172e.js","fqdn":"marulabet.com","domain":"marulabet.com","tld":"com"},"ip":{"addr":"104.21.14.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://marulabet.com/","date":"2026-01-11T02:02:20.434Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"marulabet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Dec 2025 13:13:09 GMT","end":"Mon, 30 Mar 2026 14:11:58 GMT"},"fingerprint":{"sha1":"FA:EA:E7:29:47:4D:0C:8A:97:DE:34:6B:B0:73:EC:0F:02:FE:A8:70","sha256":"70:01:CE:F8:9D:67:13:DC:31:37:03:2C:22:AB:68:81:D6:DE:0C:E8:5F:F1:92:32:46:D8:04:E1:9A:38:2E:AD"}}},"request":{"raw":"GET /_next/static/chunks/ddfd09fe5e4f172e.js HTTP/1.1\r\nHost: marulabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://marulabet.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 11 Jan 2026 02:02:20 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Sat, 27 Dec 2025 18:15:14 GMT\r\netag: W/\"55f-19b61059350\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Yd9F3G2Px7JQbhyTlGz62vVFmA0%2FgqlzmgQuwH6%2BSERBMwvLLtQRhrgxCzeNg1fnrpI0zgem9TLwKlcblOmCehS8rfG4D%2FCV2tKm\"}]}\r\ncf-ray: 9bc0d4d5182f56ae-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1375,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (1018)","md5":"84199e807406d141b78fd5fcf094d27d","sha1":"fc40f8ed1923baf501054eafb260588e3803ae7c","sha256":"b5187af1aaaaa59624e52cf61e73f1e9a265ac7327e170beaace23caf70bd147","sha512":"632a9b2b026cbce17fff52c47cc5c5c809fc1707a607c2f528c5ca6157eb3760ef8f32aaadc8ca2194d1a354daabd217787b47ab8aaeec361fbb1a9a6cc0f4d2","ssdeep":"","tlshash":"f521ed885315267cf45a91a8f3662217e0b9223f33cfb1a4c72d1979639588ca6331db","first_seen":"2026-01-11T01:55:53.473751Z","last_seen":"2026-01-11T02:03:05.258699Z","times_seen":2,"resource_available":false,"data":null}},"time_used":65,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":65,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-11","alert":"Sinkholed","trigger":"marulabet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"marulabet.com/?_rsc=r54j0","fqdn":"marulabet.com","domain":"marulabet.com","tld":"com"},"ip":{"addr":"104.21.14.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://marulabet.com/","date":"2026-01-11T02:02:23.388Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"marulabet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Dec 2025 13:13:09 GMT","end":"Mon, 30 Mar 2026 14:11:58 GMT"},"fingerprint":{"sha1":"FA:EA:E7:29:47:4D:0C:8A:97:DE:34:6B:B0:73:EC:0F:02:FE:A8:70","sha256":"70:01:CE:F8:9D:67:13:DC:31:37:03:2C:22:AB:68:81:D6:DE:0C:E8:5F:F1:92:32:46:D8:04:E1:9A:38:2E:AD"}}},"request":{"raw":"GET /?_rsc=r54j0 HTTP/1.1\r\nHost: marulabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://marulabet.com/\r\nrsc: 1\r\nnext-router-prefetch: 1\r\nnext-router-segment-prefetch: /_tree\r\nnext-url: /marulabet.com%26blue%26en/second-design\r\nsentry-trace: 9ffef7b14fef40b3bd2e466e13219bb9-854e79ac499255d4-0\r\nbaggage: sentry-environment=production,sentry-release=web%402.7.0,sentry-public_key=6d319d1014d598ea4a0365923853ee67,sentry-trace_id=9ffef7b14fef40b3bd2e466e13219bb9,sentry-sampled=false,sentry-sample_rand=0.22013458521750728,sentry-sample_rate=0.1\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 11 Jan 2026 02:02:23 GMT\r\ncontent-type: text/x-component\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nx-nextjs-rewritten-path: /marulabet.com\u0026blue\u0026en/second-design\r\nx-middleware-rewrite: /marulabet.com\u0026blue\u0026en/second-design?_rsc=r54j0\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch, Accept-Encoding\r\nx-nextjs-cache: HIT\r\nx-nextjs-prerender: 1\r\nx-nextjs-postponed: 2\r\ncache-control: s-maxage=600, stale-while-revalidate=31535400\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FcJyp6mf3cGc90X1LjAHEvYImN6UBAHaPQlHomQDPk%2B%2FbSLvZNPP9y7dWOEuXMSZ%2B8VytHcYKi88Z2T1uM1P0g%2FXreBhI1ZFZJI9\"}]}\r\ncf-ray: 9bc0d4e8389c56ae-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2333,"size_decoded":0,"mime_type":"text/x-component","magic":"ASCII text, with very long lines (824)","md5":"6692d7ef9eec533159bb5395328be1c6","sha1":"0b2a9e2255b68734cc3d0861aad1c9f452ecdfa3","sha256":"28f8817de7e458b38061ed4462ee3d2c092cc6b93dde09569f0cae3b480a4184","sha512":"50db858ff850252a14f071bd616fc4f2713a399aa2f13c3d35e521acee21313175145af615c409289c821606b4d2e9b7974e18eb6f61f3bde056fea40e5c344f","ssdeep":"","tlshash":"2a419e0cc8499eb498c9d59a61d5d7016558bf37f1b88dace04bdca4038b03d0feab87","first_seen":"2026-01-11T02:03:05.260326Z","last_seen":"2026-01-11T02:03:05.260326Z","times_seen":1,"resource_available":false,"data":null}},"time_used":90,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":90,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-11","alert":"Sinkholed","trigger":"marulabet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"marulabet.com/?action=register\u0026_rsc=bscm2","fqdn":"marulabet.com","domain":"marulabet.com","tld":"com"},"ip":{"addr":"104.21.14.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://marulabet.com/","date":"2026-01-11T02:02:24.122Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"marulabet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Dec 2025 13:13:09 GMT","end":"Mon, 30 Mar 2026 14:11:58 GMT"},"fingerprint":{"sha1":"FA:EA:E7:29:47:4D:0C:8A:97:DE:34:6B:B0:73:EC:0F:02:FE:A8:70","sha256":"70:01:CE:F8:9D:67:13:DC:31:37:03:2C:22:AB:68:81:D6:DE:0C:E8:5F:F1:92:32:46:D8:04:E1:9A:38:2E:AD"}}},"request":{"raw":"GET /?action=register\u0026_rsc=bscm2 HTTP/1.1\r\nHost: marulabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://marulabet.com/\r\nrsc: 1\r\nnext-router-prefetch: 1\r\nnext-router-segment-prefetch: /!KHVzZXItc2lkZSk/$d$M/second-design/!KGhvbWUp\r\nnext-url: /marulabet.com%26blue%26en/second-design\r\nsentry-trace: 9ffef7b14fef40b3bd2e466e13219bb9-91dd923ca0c858ed-0\r\nbaggage: sentry-environment=production,sentry-release=web%402.7.0,sentry-public_key=6d319d1014d598ea4a0365923853ee67,sentry-trace_id=9ffef7b14fef40b3bd2e466e13219bb9,sentry-sampled=false,sentry-sample_rand=0.22013458521750728,sentry-sample_rate=0.1\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 11 Jan 2026 02:02:24 GMT\r\ncontent-type: text/x-component\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nx-nextjs-rewritten-path: /marulabet.com\u0026blue\u0026en/second-design\r\nx-nextjs-rewritten-query: action=register\r\nx-middleware-rewrite: /marulabet.com\u0026blue\u0026en/second-design?action=register\u0026_rsc=bscm2\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch, Accept-Encoding\r\nx-nextjs-cache: HIT\r\nx-nextjs-prerender: 1\r\nx-nextjs-postponed: 2\r\ncache-control: s-maxage=600, stale-while-revalidate=31535400\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4vJxrKlBN2p8iN%2BvhXsRmJiSKiHkmRYA3KWN9Tr1WWqx6zsQkpyS0WOxt6dO%2FPf8nhx9SL1oNhzx08WTzsU9%2BRTuzatZWFmDfmZB\"}]}\r\ncf-ray: 9bc0d4ecc8cd56ae-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13542,"size_decoded":0,"mime_type":"text/x-component","magic":"Unicode text, UTF-8 text, with very long lines (4751)","md5":"f8e10f54775455a9da4a7e0b0ffbeb34","sha1":"ae040bded5813b12504d6f638b8394061e1af1b2","sha256":"33d2808764af38e06c35dbd40f8e8241d97b174b50d254a7c8d20185bc6d0676","sha512":"b030ce33fc83b20e55035026a976440f393a8323f654eb88f5035ed869f0bcd468dd213047f3379dee7cb78e6ba6150a28cc3b0b977b415450cee0f46272b678","ssdeep":"192:Mp7K9tXBK9tXhhK9tX9K9tXkQFrFdXZRJ9QoCaITWhGkSvyLTpChx9TchVtUTUwS:Mp7CBC/C9CfEaBsM42ah41","tlshash":"7d52676bd90fec585d76cc4d281f9327d2d88977ce319ca9e39ded9c024a0262f992d0","first_seen":"2026-01-11T02:03:05.262278Z","last_seen":"2026-01-11T02:03:05.262278Z","times_seen":1,"resource_available":false,"data":null}},"time_used":95,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":94,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-11","alert":"Sinkholed","trigger":"marulabet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"marulabet.com/providers?_rsc=1jkk3","fqdn":"marulabet.com","domain":"marulabet.com","tld":"com"},"ip":{"addr":"104.21.14.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://marulabet.com/","date":"2026-01-11T02:02:24.854Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"marulabet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Dec 2025 13:13:09 GMT","end":"Mon, 30 Mar 2026 14:11:58 GMT"},"fingerprint":{"sha1":"FA:EA:E7:29:47:4D:0C:8A:97:DE:34:6B:B0:73:EC:0F:02:FE:A8:70","sha256":"70:01:CE:F8:9D:67:13:DC:31:37:03:2C:22:AB:68:81:D6:DE:0C:E8:5F:F1:92:32:46:D8:04:E1:9A:38:2E:AD"}}},"request":{"raw":"GET /providers?_rsc=1jkk3 HTTP/1.1\r\nHost: marulabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://marulabet.com/\r\nrsc: 1\r\nnext-router-prefetch: 1\r\nnext-router-segment-prefetch: /_head\r\nnext-url: /marulabet.com%26blue%26en/second-design\r\nsentry-trace: 9ffef7b14fef40b3bd2e466e13219bb9-a84bb0da82e29929-0\r\nbaggage: sentry-environment=production,sentry-release=web%402.7.0,sentry-public_key=6d319d1014d598ea4a0365923853ee67,sentry-trace_id=9ffef7b14fef40b3bd2e466e13219bb9,sentry-sampled=false,sentry-sample_rand=0.22013458521750728,sentry-sample_rate=0.1\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 11 Jan 2026 02:02:24 GMT\r\ncontent-type: text/x-component\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nx-nextjs-rewritten-path: /marulabet.com\u0026blue\u0026en/second-design/providers\r\nx-middleware-rewrite: /marulabet.com\u0026blue\u0026en/second-design/providers?_rsc=1jkk3\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch, Accept-Encoding\r\nx-nextjs-cache: HIT\r\nx-nextjs-prerender: 1\r\nx-nextjs-postponed: 2\r\ncache-control: s-maxage=600, stale-while-revalidate=31535400\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XWisBRoSTGOzYujcI9zFZZmPKrP8QDnMU98zI4FwOc33zQa5X7Nx9P72ySqNV2ASU9%2FpzQiCpruG%2FQX4EAVbhmROBPPaVT%2BU8e6k\"}]}\r\ncf-ray: 9bc0d4f158fd56ae-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1965,"size_decoded":0,"mime_type":"text/x-component","magic":"ASCII text, with very long lines (1444)","md5":"6c421767d164700bb202c9c9dc5a75f1","sha1":"3307eee16bcd0354b14a8bc46fe024d0cfa83dc8","sha256":"1bde8df6c6a1bdd59c977fe118261690fa64a378821417905e1f73dc387b07a4","sha512":"da5bff3cd87a9f3e0299e5382e754348a6ae99f592871f64568466c98ff9a5a02dfcad92dcce2da0a0da9f42d2d0612d95ab29e1815cc95b53a6e4a04ad84467","ssdeep":"","tlshash":"f2410f7a880cec8e5a67c959086ff31a160d1677c6701e7adaaccd0e19c602e5f60f90","first_seen":"2026-01-11T02:03:05.226237Z","last_seen":"2026-01-11T02:03:05.226237Z","times_seen":1,"resource_available":false,"data":null}},"time_used":91,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":91,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-11","alert":"Sinkholed","trigger":"marulabet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"marulabet.com/_next/static/chunks/5591d5031e0a2981.js","fqdn":"marulabet.com","domain":"marulabet.com","tld":"com"},"ip":{"addr":"104.21.14.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://marulabet.com/","date":"2026-01-11T02:02:24.954Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"marulabet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Dec 2025 13:13:09 GMT","end":"Mon, 30 Mar 2026 14:11:58 GMT"},"fingerprint":{"sha1":"FA:EA:E7:29:47:4D:0C:8A:97:DE:34:6B:B0:73:EC:0F:02:FE:A8:70","sha256":"70:01:CE:F8:9D:67:13:DC:31:37:03:2C:22:AB:68:81:D6:DE:0C:E8:5F:F1:92:32:46:D8:04:E1:9A:38:2E:AD"}}},"request":{"raw":"GET /_next/static/chunks/5591d5031e0a2981.js HTTP/1.1\r\nHost: marulabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://marulabet.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 11 Jan 2026 02:02:25 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Sat, 03 Jan 2026 18:08:44 GMT\r\netag: W/\"723b-19b850c23e0\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qkkIeqiNwgGUSUe5Y2TDFArk9jshOX9umRrExkCVu5yo2%2B%2BKHz%2FvBriluIGNkA1%2F08iNIzQOwMIHNrYCr1znFSDj%2Fu2k48XqzKlF\"}]}\r\ncf-ray: 9bc0d4f1f90056ae-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":29243,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (28885)","md5":"74e073624036e19414a20231f712bb5c","sha1":"22d38714d6d9a2f404643ad7129ee9ab87c699a9","sha256":"2d75afa09cf563c2fed39091e4456406e1648cbf30414215fe41d46180fc4667","sha512":"2487ac02f925fbd8ed181bb83079af140ec780b4271c90437bd8ae3f10c33755211433e8344a4117ae1dc81419ae470f0f07645bce34a6b026fad03e96003bea","ssdeep":"384:TBBNKMneohgZlz7FSwiSCD7jVCdBLrS+X1Fv2bTNKcjGbvYekGLLoo+eqfQS5O:7NErxh54fVCb++n2babYVoNqfP4","tlshash":"ecd22f159165bbecf53b04b8ba6d806c721e9b54cb0f8939f5b83c311a410d4ba67bce","first_seen":"2026-01-11T01:55:53.433179Z","last_seen":"2026-01-11T02:03:05.264256Z","times_seen":2,"resource_available":true,"data":null}},"time_used":61,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":59,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-11","alert":"Sinkholed","trigger":"marulabet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"marulabet.com/_next/static/media/Roboto_Regular-s.p.0a2e2b47.ttf","fqdn":"marulabet.com","domain":"marulabet.com","tld":"com"},"ip":{"addr":"104.21.14.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://marulabet.com/","date":"2026-01-11T02:02:20.362Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"marulabet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Dec 2025 13:13:09 GMT","end":"Mon, 30 Mar 2026 14:11:58 GMT"},"fingerprint":{"sha1":"FA:EA:E7:29:47:4D:0C:8A:97:DE:34:6B:B0:73:EC:0F:02:FE:A8:70","sha256":"70:01:CE:F8:9D:67:13:DC:31:37:03:2C:22:AB:68:81:D6:DE:0C:E8:5F:F1:92:32:46:D8:04:E1:9A:38:2E:AD"}}},"request":{"raw":"GET /_next/static/media/Roboto_Regular-s.p.0a2e2b47.ttf HTTP/1.1\r\nHost: marulabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://marulabet.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 11 Jan 2026 02:02:20 GMT\r\ncontent-type: font/ttf\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Wed, 07 Jan 2026 18:59:37 GMT\r\netag: W/\"29144-19b99d429a8\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7ziEb2QUyYrKZ0XYwB%2FIOe%2FIBVjkFzVWIPoiMXT0%2BR6EqYXk81l5eL54BlPzTWssJXw6J680nyTYf4kLkIn4wq9IgrXPBwF3o8Gt\"}]}\r\ncf-ray: 9bc0d4d4b80356ae-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":168260,"size_decoded":0,"mime_type":"font/ttf","magic":"TrueType Font data, 18 tables, 1st \"GDEF\", 13 names, Microsoft, language 0x409, Copyright 2011 Google Inc. All Rights Reserved.RobotoRegularVersion 2.137; 2017Roboto-RegularRob","md5":"8a36205bd9b83e03af0591a004bc97f4","sha1":"56c5c0d38bde4c1f1549dda43db37b09c608aad3","sha256":"4e147ab64b9fdf6d89d01f6b8c3ca0b3cddc59d608a8e2218f9a2504b5c98e14","sha512":"e96b43b0ca3fd7775d75a702f44cd1b0dfd325e1db317f7cba84efdf572571fe7594068f9132a937251aab8bd1f68783213677d4953aca197195fbe5db1f90d7","ssdeep":"3072:5y2goL/sAQRuzzlPrvRwhRFUzMWlYfxJVBxV+aYT3qPXI0yH4yDuNOIOU7og2NE/:xOmCeu+bqPeHr0WUMxNE/","tlshash":"83f3d601d642aa19c6d6b2787c7cb3be4c75e82dfd4a602734e5af2115c8c05ec69bbc","first_seen":"2023-04-07T15:31:36Z","last_seen":"2026-08-05T13:09:19.762343Z","times_seen":10236,"resource_available":false,"data":null}},"time_used":200,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":60,"receive":140,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-11","alert":"Sinkholed","trigger":"marulabet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"marulabet.com/_next/static/chunks/afe9e5f1517daf8c.js","fqdn":"marulabet.com","domain":"marulabet.com","tld":"com"},"ip":{"addr":"104.21.14.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://marulabet.com/","date":"2026-01-11T02:02:20.379Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"marulabet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Dec 2025 13:13:09 GMT","end":"Mon, 30 Mar 2026 14:11:58 GMT"},"fingerprint":{"sha1":"FA:EA:E7:29:47:4D:0C:8A:97:DE:34:6B:B0:73:EC:0F:02:FE:A8:70","sha256":"70:01:CE:F8:9D:67:13:DC:31:37:03:2C:22:AB:68:81:D6:DE:0C:E8:5F:F1:92:32:46:D8:04:E1:9A:38:2E:AD"}}},"request":{"raw":"GET /_next/static/chunks/afe9e5f1517daf8c.js HTTP/1.1\r\nHost: marulabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://marulabet.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 11 Jan 2026 02:02:20 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Sat, 27 Dec 2025 18:15:16 GMT\r\netag: W/\"cb8d-19b61059b20\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=t0kYp0u2KX%2BTpQ7SrLzqFTmfsaw4Ln%2BbXeAsfgnO7qe4aMVpyMfXaneYKSJzRfJ%2Bgss0T4s05e6a1ytLzyjnIDNCqd9vG%2BDwHmqT\"}]}\r\ncf-ray: 9bc0d4d4d80d56ae-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":52109,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (32353)","md5":"f76bb6e3d34209f03535b151deeb61e6","sha1":"bc8eddccc2633b6f0b755a742cc6f6d3155d7973","sha256":"17464d2798351413136a50b6d85782c9a84ac29421cf6b73fee30d0d230c6f9b","sha512":"b3e0e8f37c6260f9bb6ff18906c926afb3c2a4042a9644c8fe9829aaab666a535fce4638dd46402e569c4ecd2e6b636056a90ca0b21899912b9350795e77a076","ssdeep":"768:IwR2vTVWPH/y/nNqbK9b67oQh9PAwjpXVbzPG/T2dgWatCwAsKdOBkBQym1mL9Kr:vWzQb5jVVbzQ2dGgwA1UiBl5KAwOG","tlshash":"9733b5e5b396723143da0265907e4107f37d8d94104a8128fa6dc9de3aa848db3f7f7a","first_seen":"2025-12-31T07:43:06.459924Z","last_seen":"2026-01-11T02:03:05.266473Z","times_seen":3,"resource_available":true,"data":null}},"time_used":142,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":78,"receive":64,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-11","alert":"Sinkholed","trigger":"marulabet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"marulabet.com/_next/static/chunks/dee32955bbd2c0b2.js","fqdn":"marulabet.com","domain":"marulabet.com","tld":"com"},"ip":{"addr":"104.21.14.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://marulabet.com/","date":"2026-01-11T02:02:20.393Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"marulabet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Dec 2025 13:13:09 GMT","end":"Mon, 30 Mar 2026 14:11:58 GMT"},"fingerprint":{"sha1":"FA:EA:E7:29:47:4D:0C:8A:97:DE:34:6B:B0:73:EC:0F:02:FE:A8:70","sha256":"70:01:CE:F8:9D:67:13:DC:31:37:03:2C:22:AB:68:81:D6:DE:0C:E8:5F:F1:92:32:46:D8:04:E1:9A:38:2E:AD"}}},"request":{"raw":"GET /_next/static/chunks/dee32955bbd2c0b2.js HTTP/1.1\r\nHost: marulabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://marulabet.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 11 Jan 2026 02:02:20 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Wed, 07 Jan 2026 18:59:38 GMT\r\netag: W/\"81c2-19b99d42d90\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=iJzkVewSWzt0mzjBDvbWzjLPqDXQt%2FSi3L6nm%2BKhm63IwR0HustisANSJmXnoetpGA0bXaGdJxFs4N%2B%2F8dkt0sXKDMOcgAHgX9YX\"}]}\r\ncf-ray: 9bc0d4d4e81656ae-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":33218,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (32861)","md5":"8783f1c31cb6c0b2368001916272b4d3","sha1":"89d987aad7f21b64bed8682b9339eabf67df0405","sha256":"1b362dd190e18d05b19a9ea8be2b7b3100f88e2cbb0121d9dd2efb7c51fc22cf","sha512":"25701a18a4dfc75d38d8b9321e1915ed5eb6c3be44ce754b5854b34457cb53a6d807a2154ef78bccd8db1ec0385388c3b5a5c747861dc86ba1deab705f70fa5e","ssdeep":"384:CpMGoDVm7PRR+3iGcgrzihsKMg1xUBLK5cwXK2kj4/shZoYR18irM:COxDVm72HcgvVW1xUgXBicYYirM","tlshash":"35e2d870719096fc6a9344e6f03e800c70286aa4ce6d5561f3ba7cb98a119c97e73fc7","first_seen":"2026-01-11T01:55:53.549593Z","last_seen":"2026-01-11T02:03:05.267764Z","times_seen":2,"resource_available":false,"data":null}},"time_used":119,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":76,"receive":43,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-11","alert":"Sinkholed","trigger":"marulabet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"marulabet.com/_next/static/chunks/bc00dbd968053a62.js","fqdn":"marulabet.com","domain":"marulabet.com","tld":"com"},"ip":{"addr":"104.21.14.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://marulabet.com/","date":"2026-01-11T02:02:20.429Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"marulabet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Dec 2025 13:13:09 GMT","end":"Mon, 30 Mar 2026 14:11:58 GMT"},"fingerprint":{"sha1":"FA:EA:E7:29:47:4D:0C:8A:97:DE:34:6B:B0:73:EC:0F:02:FE:A8:70","sha256":"70:01:CE:F8:9D:67:13:DC:31:37:03:2C:22:AB:68:81:D6:DE:0C:E8:5F:F1:92:32:46:D8:04:E1:9A:38:2E:AD"}}},"request":{"raw":"GET /_next/static/chunks/bc00dbd968053a62.js HTTP/1.1\r\nHost: marulabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://marulabet.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 11 Jan 2026 02:02:20 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Sat, 27 Dec 2025 18:15:15 GMT\r\netag: W/\"107fb-19b61059738\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Osu0WA32F6JpRpBZH2CmT7nnJ0XnyYZYUNj9VS32Go3mDpA7wSV9gLhp8xm%2BZDDOb1J%2FYVFtEjF%2FkvM3GxMm5rOyipQ2WPk9%2B2XN\"}]}\r\ncf-ray: 9bc0d4d5182d56ae-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":67579,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"54063eb7b6a4e8845b7b5621d59393f2","sha1":"1dd66c0341da2e2046839b93e596e940817f6422","sha256":"c1bf519ba156ca7fb4bfed64075ee0b668cc32cce0f8a00f4ce720371dee3bc7","sha512":"07eb929ac5488c8b066a963b55d92a1d4146f1f6ebfc87e977e602a7faa1c8943511f3c785b04d6e0aad2e89d14d567e6d641a9cd476de66590be4d7d2248a49","ssdeep":"768:e6OHRgDFZ92YskdtAO/rx4soJY0W07sXlAa7Kht+DLN1AbgnnqD+hH:HOHRgDFZc4tAsv0h62gL39nqa1","tlshash":"bc632ae63351b462d3db5196c4ae8501a27a59e4240c083c75fdddeb3822c8962fbf7e","first_seen":"2026-01-11T01:55:53.442527Z","last_seen":"2026-02-19T17:02:28.647339Z","times_seen":73,"resource_available":true,"data":null}},"time_used":114,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":65,"receive":49,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-11","alert":"Sinkholed","trigger":"marulabet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"marulabet.com/icons/coinsIcons/eth.svg","fqdn":"marulabet.com","domain":"marulabet.com","tld":"com"},"ip":{"addr":"104.21.14.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://marulabet.com/","date":"2026-01-11T02:02:20.998Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"marulabet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Dec 2025 13:13:09 GMT","end":"Mon, 30 Mar 2026 14:11:58 GMT"},"fingerprint":{"sha1":"FA:EA:E7:29:47:4D:0C:8A:97:DE:34:6B:B0:73:EC:0F:02:FE:A8:70","sha256":"70:01:CE:F8:9D:67:13:DC:31:37:03:2C:22:AB:68:81:D6:DE:0C:E8:5F:F1:92:32:46:D8:04:E1:9A:38:2E:AD"}}},"request":{"raw":"GET /icons/coinsIcons/eth.svg HTTP/1.1\r\nHost: marulabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://marulabet.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 11 Jan 2026 02:02:21 GMT\r\ncontent-type: image/svg+xml\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1FLnDDhNL3%2Fg1Yox7HQNdZxdQ4zOVZU5cUbtaVY35ZlIe1FLeRTa6vqCaAFZdboWDqStBKqaj6qv3pKlNyuaZVTlgqrEv3xYMGp6\"}]}\r\npriority: u=4,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: br\r\nlast-modified: Sat, 27 Dec 2025 17:40:04 GMT\r\netag: W/\"3c1-19b60e563f5\"\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9bc0d4d9284b56ae-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":961,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"9e06adec921a96194d70249b63125520","sha1":"330d0116f4d6e867deeb03b5df9c07d0aee11c05","sha256":"6d9fffdf505bed96390e3c3f9beb67f825c38d12309012d1c43da447ddf1445c","sha512":"0eda2f8788d39c7ffd633c85e479d36fddaef9171d390e92b3b3b9e8d21834a3f973d1c0d02ecfbf615a06595f1f2dffba5874ed8ab47f5f4dd3684af104ce3c","ssdeep":"","tlshash":"90112be8bf0ee0a45a4483426d29707d921fe1d49f9401615e405b1a3e89c67cc27ad4","first_seen":"2026-01-11T01:55:53.531385Z","last_seen":"2026-02-01T16:58:56.241319Z","times_seen":3,"resource_available":false,"data":null}},"time_used":60,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":60,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-11","alert":"Sinkholed","trigger":"marulabet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"marulabet.com/license/gcb.avif","fqdn":"marulabet.com","domain":"marulabet.com","tld":"com"},"ip":{"addr":"104.21.14.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://marulabet.com/","date":"2026-01-11T02:02:21.010Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"marulabet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Dec 2025 13:13:09 GMT","end":"Mon, 30 Mar 2026 14:11:58 GMT"},"fingerprint":{"sha1":"FA:EA:E7:29:47:4D:0C:8A:97:DE:34:6B:B0:73:EC:0F:02:FE:A8:70","sha256":"70:01:CE:F8:9D:67:13:DC:31:37:03:2C:22:AB:68:81:D6:DE:0C:E8:5F:F1:92:32:46:D8:04:E1:9A:38:2E:AD"}}},"request":{"raw":"GET /license/gcb.avif HTTP/1.1\r\nHost: marulabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://marulabet.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 11 Jan 2026 02:02:21 GMT\r\ncontent-type: image/avif\r\ncontent-length: 2431\r\npriority: u=4,i=?0\r\naccept-ranges: bytes\r\ncache-control: public, max-age=31536000, immutable\r\nlast-modified: Fri, 24 Oct 2025 21:33:41 GMT\r\netag: W/\"97f-19a18244308\"\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HJbJL3EZ%2BdJ10tXvhBVlOqneYUBHN3OTseHKA9uSdeKwfm4yF4kzH0%2B6o29aQq%2FbqzNEhZWAmAi%2FdVH23REBvPywB7LAqbJvYHXa\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9bc0d4d9385556ae-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2431,"size_decoded":0,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"9a5b6cecaefd4be0dd45c2e44bab739c","sha1":"060f690604f9082eca316cc99e0c855551ab285b","sha256":"a53dba76c4cf41a57710e03e004e26613adf21b4ef1186e838ab027724812abb","sha512":"82849eb047b6e11110d29b4f6e010b20d48579c11571001dd50ffed03fa61e9ad64ac19f9098cdb2baf40c15e969df465256d309f4ece344afa7b9ae5bd6e9cd","ssdeep":"","tlshash":"2c41ea39e3760e24cf2d16388e5409f63332c25928952bf46d9fb7494d09b64ceb4d89","first_seen":"2024-08-21T16:47:21Z","last_seen":"2026-07-12T12:15:28.195315Z","times_seen":224,"resource_available":false,"data":null}},"time_used":52,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":52,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-11","alert":"Sinkholed","trigger":"marulabet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"marulabet.com/group/slots?_rsc=1ss1o","fqdn":"marulabet.com","domain":"marulabet.com","tld":"com"},"ip":{"addr":"104.21.14.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://marulabet.com/","date":"2026-01-11T02:02:25.343Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"marulabet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Dec 2025 13:13:09 GMT","end":"Mon, 30 Mar 2026 14:11:58 GMT"},"fingerprint":{"sha1":"FA:EA:E7:29:47:4D:0C:8A:97:DE:34:6B:B0:73:EC:0F:02:FE:A8:70","sha256":"70:01:CE:F8:9D:67:13:DC:31:37:03:2C:22:AB:68:81:D6:DE:0C:E8:5F:F1:92:32:46:D8:04:E1:9A:38:2E:AD"}}},"request":{"raw":"GET /group/slots?_rsc=1ss1o HTTP/1.1\r\nHost: marulabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://marulabet.com/\r\nrsc: 1\r\nnext-router-prefetch: 1\r\nnext-router-segment-prefetch: /!KHVzZXItc2lkZSk/$d$M/second-design/!KGhvbWUp/group/$d$group/__PAGE__\r\nnext-url: /marulabet.com%26blue%26en/second-design\r\nsentry-trace: 9ffef7b14fef40b3bd2e466e13219bb9-8523a8b746b93449-0\r\nbaggage: sentry-environment=production,sentry-release=web%402.7.0,sentry-public_key=6d319d1014d598ea4a0365923853ee67,sentry-trace_id=9ffef7b14fef40b3bd2e466e13219bb9,sentry-sampled=false,sentry-sample_rand=0.22013458521750728,sentry-sample_rate=0.1\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 11 Jan 2026 02:02:25 GMT\r\ncontent-type: text/x-component\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nx-nextjs-rewritten-path: /marulabet.com\u0026blue\u0026en/second-design/group/slots\r\nx-middleware-rewrite: /marulabet.com\u0026blue\u0026en/second-design/group/slots?_rsc=1ss1o\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch, Accept-Encoding\r\nx-nextjs-cache: HIT\r\nx-nextjs-prerender: 1\r\nx-nextjs-postponed: 2\r\ncache-control: s-maxage=600, stale-while-revalidate=31535400\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=AK%2FoTcozaqs846HOhYZkVaBFZ0F0Y3dg1BE9m%2BIq87%2Ftf47nwl5GMEj3Hv4oy6%2FughLq1ZVV0rUgsDBzltb0FWBVC6XIMbd9Ds2J\"}]}\r\ncf-ray: 9bc0d4f4691e56ae-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10444,"size_decoded":0,"mime_type":"text/x-component","magic":"ASCII text, with very long lines (8168)","md5":"e71781fe0c596fbb4acdfbc909302bab","sha1":"bc160265f66b91fc3e03b2b41e30af2d51ad88e5","sha256":"446860507d8e3b4d6347fd9cd8a4c0660050e01c28a4f835f60499b91af6b49b","sha512":"ec7d3c0a4e1059c877e0c95d99da5bb473bb778d7ad67a0e8ff92eae5721bf0db7e3582109e835771ba10945406f2c1fefc5002f09375e903f6e26f582ff8bfc","ssdeep":"192:W8K9tXzg5YeMfcWLL3n7ntXmj76186MT6MKv:W8CkILz5V186MTS","tlshash":"fd226a67d888eda842bdcc4914c7161ae8edbe3761d82e1c242dcc7ec9eec5b5700997","first_seen":"2026-01-11T01:55:53.466352Z","last_seen":"2026-01-11T02:03:05.272291Z","times_seen":2,"resource_available":false,"data":null}},"time_used":99,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":90,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-11","alert":"Sinkholed","trigger":"marulabet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"marulabet.com/_next/static/chunks/a85c5f2112ae0905.css","fqdn":"marulabet.com","domain":"marulabet.com","tld":"com"},"ip":{"addr":"104.21.14.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://marulabet.com/","date":"2026-01-11T02:02:20.366Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"marulabet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Dec 2025 13:13:09 GMT","end":"Mon, 30 Mar 2026 14:11:58 GMT"},"fingerprint":{"sha1":"FA:EA:E7:29:47:4D:0C:8A:97:DE:34:6B:B0:73:EC:0F:02:FE:A8:70","sha256":"70:01:CE:F8:9D:67:13:DC:31:37:03:2C:22:AB:68:81:D6:DE:0C:E8:5F:F1:92:32:46:D8:04:E1:9A:38:2E:AD"}}},"request":{"raw":"GET /_next/static/chunks/a85c5f2112ae0905.css HTTP/1.1\r\nHost: marulabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://marulabet.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 11 Jan 2026 02:02:20 GMT\r\ncontent-type: text/css; charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Sat, 22 Nov 2025 20:44:06 GMT\r\netag: W/\"ce7-19aad4f49f0\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FlHcU%2BfFqeJ5etXpSjeDCvy8a13TEtjPj9FZX211JovNkncDc75Tggy7nFSXjLlNeA0CSQmpFXbqMK1T7IuxAkGgE7QJig7R4YUj\"}]}\r\ncf-ray: 9bc0d4d4c80656ae-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3303,"size_decoded":0,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text, with very long lines (1085)","md5":"e0eae693638a4faffd4c9f557a7438b1","sha1":"6bfb8474afb2f4ba719f35fe3dc2aef001107552","sha256":"5d3675b31c9a19c7c528d457f5543f31e62ec5d85f076f8de0ca5ecc8bb47367","sha512":"3843c89db03ab7a8f9e518bd9e9590c414ecfcdf24e6eb6ae8ef9da51dbf37c9bebc3c1e08072f7cf75ed6b5610766e024574425042890a0d93396e2ba46ddfa","ssdeep":"","tlshash":"e8617510011e923ad8b59d97778e3fa13ca8bc90a5795d23e5290d2d8ad7c7b13f0f29","first_seen":"2025-11-23T22:59:50.498332Z","last_seen":"2026-07-30T14:11:56.975941Z","times_seen":221,"resource_available":false,"data":null}},"time_used":87,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":85,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-11","alert":"Sinkholed","trigger":"marulabet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"marulabet.com/games_new_webp/pragmatic-play-wildies.webp","fqdn":"marulabet.com","domain":"marulabet.com","tld":"com"},"ip":{"addr":"104.21.14.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://marulabet.com/","date":"2026-01-11T02:02:23.777Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"marulabet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Dec 2025 13:13:09 GMT","end":"Mon, 30 Mar 2026 14:11:58 GMT"},"fingerprint":{"sha1":"FA:EA:E7:29:47:4D:0C:8A:97:DE:34:6B:B0:73:EC:0F:02:FE:A8:70","sha256":"70:01:CE:F8:9D:67:13:DC:31:37:03:2C:22:AB:68:81:D6:DE:0C:E8:5F:F1:92:32:46:D8:04:E1:9A:38:2E:AD"}}},"request":{"raw":"GET /games_new_webp/pragmatic-play-wildies.webp HTTP/1.1\r\nHost: marulabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://marulabet.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 11 Jan 2026 02:02:23 GMT\r\ncontent-type: image/webp\r\ncontent-length: 23924\r\npriority: u=4,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Thu, 01 Jan 2026 18:08:16 GMT\r\netag: W/\"5d74-19b7abefe80\"\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=svCpIJaMx4W2QId%2BlAIvuPJJlVT%2FQSXItRpJW5CKPObNQv6S%2F%2FcuplOIV8jE3LcpzZ9S6svkCRHWaeyS%2Bh9xcvkvgaDSmV3bGLNC\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9bc0d4ea88b156ae-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":23924,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 408x546, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"d711cdd0be88c4c4701005090a1bd638","sha1":"0c33175146483f9309914cab1dc47b4485f08fe2","sha256":"ea7115e4244ec02de229ad8109f322ee899c99e9b380da21c9338460462ed7ce","sha512":"e476de2cf6a6faca68af3291167d0c3776f3a5020b73a7b43c846edb58d03064c4bf676f17c1c000aea229973a7230f9176cc8b4b0460806141ab13a162581d0","ssdeep":"384:V5wNaiFhxD54GUEpTl6SiCXjEOwlLPjFRxbc5olC6R7TgMo8Hdu6XrHe4f:V5wNhffXTEOjBsbFRxN1LoYdu6Xr+4f","tlshash":"aab2e12c92032e8a31b48f9da4fa1b7f45aad6c8257ff009564b2c73a6d71af9d10052","first_seen":"2026-01-11T02:03:05.279226Z","last_seen":"2026-01-31T21:23:44.394364Z","times_seen":3,"resource_available":false,"data":null}},"time_used":64,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":50,"receive":14,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-11","alert":"Sinkholed","trigger":"marulabet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"marulabet.com/second-design/ranks/iron1.webp","fqdn":"marulabet.com","domain":"marulabet.com","tld":"com"},"ip":{"addr":"104.21.14.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://marulabet.com/","date":"2026-01-11T02:02:23.753Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"marulabet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Dec 2025 13:13:09 GMT","end":"Mon, 30 Mar 2026 14:11:58 GMT"},"fingerprint":{"sha1":"FA:EA:E7:29:47:4D:0C:8A:97:DE:34:6B:B0:73:EC:0F:02:FE:A8:70","sha256":"70:01:CE:F8:9D:67:13:DC:31:37:03:2C:22:AB:68:81:D6:DE:0C:E8:5F:F1:92:32:46:D8:04:E1:9A:38:2E:AD"}}},"request":{"raw":"GET /second-design/ranks/iron1.webp HTTP/1.1\r\nHost: marulabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://marulabet.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 11 Jan 2026 02:02:23 GMT\r\ncontent-type: image/webp\r\ncontent-length: 5178\r\npriority: u=4,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Sat, 27 Dec 2025 17:40:05 GMT\r\netag: W/\"143a-19b60e56679\"\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=sfLzCIHOglQQFY2UfnjTdu8ABQs4eJrq7mwiaVRbR6kVjBKwzgAH1omKzrS1xpUKosMiIL0OBH5ytefuLpon3NY3eBxMSx0jovzt\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9bc0d4ea68a756ae-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5178,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"aeac0c9d6985d75770d9fc9678c216da","sha1":"f230f4b921a9b3f50c559ebfa807b9af758a9bd7","sha256":"eed273a22b1add3b4677e4fe47438f2f610db2bc75e1a7f06ac6298505b6ffef","sha512":"5babbf40391a6fc6a700c9bf92d1b3cbece6d746f2e058416f8f9b27ba13e68300bef643c0b6e3b40e9770e455b7b50195f1f04835b83a1ae837920ee7aa895b","ssdeep":"96:Aen8uSxTbgZHeCGL2DMl93qnRV4Meo3TIUzzq7tCR+h/RkCS582Yqr:Ae8uS+5et2DMl938t7TF2T/RkCu80r","tlshash":"fcb16ced94d4626b77f21868b1758b1156fc30e3d938140bd0d0a4bf8e183b6c563364","first_seen":"2026-01-11T01:55:53.464722Z","last_seen":"2026-02-19T17:02:28.871721Z","times_seen":34,"resource_available":false,"data":null}},"time_used":65,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":62,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-11","alert":"Sinkholed","trigger":"marulabet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"marulabet.com/games_new_webp/hacksaw-slayers-inc.webp","fqdn":"marulabet.com","domain":"marulabet.com","tld":"com"},"ip":{"addr":"104.21.14.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://marulabet.com/","date":"2026-01-11T02:02:23.755Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"marulabet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Dec 2025 13:13:09 GMT","end":"Mon, 30 Mar 2026 14:11:58 GMT"},"fingerprint":{"sha1":"FA:EA:E7:29:47:4D:0C:8A:97:DE:34:6B:B0:73:EC:0F:02:FE:A8:70","sha256":"70:01:CE:F8:9D:67:13:DC:31:37:03:2C:22:AB:68:81:D6:DE:0C:E8:5F:F1:92:32:46:D8:04:E1:9A:38:2E:AD"}}},"request":{"raw":"GET /games_new_webp/hacksaw-slayers-inc.webp HTTP/1.1\r\nHost: marulabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://marulabet.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 11 Jan 2026 02:02:23 GMT\r\ncontent-type: image/webp\r\ncontent-length: 10700\r\npriority: u=4,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Thu, 01 Jan 2026 18:08:17 GMT\r\netag: W/\"29cc-19b7abf0268\"\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2orlrDU6bUr5KDvr6F%2BrtJYTr4FnnpYhZUSziAsX4sFvy%2B%2B04rr9U83t9Kf5OJtPsunqehFkLrCWiLXPCfBy6QArQnURcolGfSON\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9bc0d4ea68a856ae-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10700,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"43a4dd556f9230324519c30421ee8495","sha1":"6550fd50db2ff13079eaebafe89ad37beebb6a16","sha256":"083222e32aca9b8e910f8a920896dd0293f468b754e099cc6a5e9f676576e8eb","sha512":"c4e4293e0bceedb67620546c2cf2cb664a3ed3f1035e5b4c4633f86eb291c56e8844835eecbcee7ac622408656ca94b9742d03d5b6b2958bb03fe1a945d91a29","ssdeep":"192:sNYNMtKw9YsBjObQN5xTpF9bxC/mluJN5qx6cCjMCNu:IYNg79YgjIQNFFNXuJ8aMwu","tlshash":"dc22aeafe716c2a6fa52d5bc41e113a031d33725e7322c9637a7ed2911908dd098e28f","first_seen":"2026-01-11T02:03:05.284585Z","last_seen":"2026-01-11T02:03:05.284585Z","times_seen":1,"resource_available":false,"data":null}},"time_used":70,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":69,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-11","alert":"Sinkholed","trigger":"marulabet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"marulabet.com/terms?_rsc=woqy2","fqdn":"marulabet.com","domain":"marulabet.com","tld":"com"},"ip":{"addr":"104.21.14.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://marulabet.com/","date":"2026-01-11T02:02:24.603Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"marulabet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Dec 2025 13:13:09 GMT","end":"Mon, 30 Mar 2026 14:11:58 GMT"},"fingerprint":{"sha1":"FA:EA:E7:29:47:4D:0C:8A:97:DE:34:6B:B0:73:EC:0F:02:FE:A8:70","sha256":"70:01:CE:F8:9D:67:13:DC:31:37:03:2C:22:AB:68:81:D6:DE:0C:E8:5F:F1:92:32:46:D8:04:E1:9A:38:2E:AD"}}},"request":{"raw":"GET /terms?_rsc=woqy2 HTTP/1.1\r\nHost: marulabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://marulabet.com/\r\nrsc: 1\r\nnext-router-prefetch: 1\r\nnext-router-segment-prefetch: /!KHVzZXItc2lkZSk/$d$M/second-design/!KGhvbWUp/terms/__PAGE__\r\nnext-url: /marulabet.com%26blue%26en/second-design\r\nsentry-trace: 9ffef7b14fef40b3bd2e466e13219bb9-843e41ad82e0f20c-0\r\nbaggage: sentry-environment=production,sentry-release=web%402.7.0,sentry-public_key=6d319d1014d598ea4a0365923853ee67,sentry-trace_id=9ffef7b14fef40b3bd2e466e13219bb9,sentry-sampled=false,sentry-sample_rand=0.22013458521750728,sentry-sample_rate=0.1\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 11 Jan 2026 02:02:24 GMT\r\ncontent-type: text/x-component\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nx-nextjs-rewritten-path: /marulabet.com\u0026blue\u0026en/second-design/terms\r\nx-middleware-rewrite: /marulabet.com\u0026blue\u0026en/second-design/terms?_rsc=woqy2\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch, Accept-Encoding\r\nx-nextjs-cache: HIT\r\nx-nextjs-prerender: 1\r\nx-nextjs-postponed: 2\r\ncache-control: s-maxage=600, stale-while-revalidate=31535400\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pEZ4twRnZYo0jJ%2BCOZAEZ3oHAZ5og36PZWiu%2Fw%2FKp0ZggjyvywO7g5a%2B%2BzcqhJO6j%2BMkXx%2F%2FVWHEc7nmZyhZyIm2X%2Br%2B7G7U2V6L\"}]}\r\ncf-ray: 9bc0d4efc8ed56ae-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":61824,"size_decoded":0,"mime_type":"text/x-component","magic":"Unicode text, UTF-8 text, with very long lines (4152)","md5":"8fe76fc86b476f4b3232d23ba5d4a9a6","sha1":"2c68ae7988a723f4abcebb4d6630368b21f748f6","sha256":"d00315bdc90d8c17f70d2a216264368494afae272444b05d3c8b580988ea9c4c","sha512":"58f241806bdb35263b99a7458cd15e00d1e4ac17ae95b7af7a9ec9c33050a07a3e2a74024fa368dc8e7c724b4086a5746a2e978652029dbfadff2332e09658ca","ssdeep":"1536:/f8yLdpLeYzeULyZtIZ1Ah4hVZ4IZGYUPpWVBWyHJ0x1TOeKI5T1/iZpVqz1+MXh:X8yLdNeYzeULyZtIZ1Ah4hVZ4IQYURWc","tlshash":"7c53609de30957bd8abb1031350ed1eaf71d0278db36cdffa5a95a2903479244a2b3c4","first_seen":"2026-01-11T02:03:05.2866Z","last_seen":"2026-01-11T02:03:05.2866Z","times_seen":1,"resource_available":false,"data":null}},"time_used":112,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":93,"receive":19,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-11","alert":"Sinkholed","trigger":"marulabet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"marulabet.com/vip?_rsc=1jkk3","fqdn":"marulabet.com","domain":"marulabet.com","tld":"com"},"ip":{"addr":"104.21.14.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://marulabet.com/","date":"2026-01-11T02:02:24.823Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"marulabet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Dec 2025 13:13:09 GMT","end":"Mon, 30 Mar 2026 14:11:58 GMT"},"fingerprint":{"sha1":"FA:EA:E7:29:47:4D:0C:8A:97:DE:34:6B:B0:73:EC:0F:02:FE:A8:70","sha256":"70:01:CE:F8:9D:67:13:DC:31:37:03:2C:22:AB:68:81:D6:DE:0C:E8:5F:F1:92:32:46:D8:04:E1:9A:38:2E:AD"}}},"request":{"raw":"GET /vip?_rsc=1jkk3 HTTP/1.1\r\nHost: marulabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://marulabet.com/\r\nrsc: 1\r\nnext-router-prefetch: 1\r\nnext-router-segment-prefetch: /_head\r\nnext-url: /marulabet.com%26blue%26en/second-design\r\nsentry-trace: 9ffef7b14fef40b3bd2e466e13219bb9-a4d4e5b964bdac4b-0\r\nbaggage: sentry-environment=production,sentry-release=web%402.7.0,sentry-public_key=6d319d1014d598ea4a0365923853ee67,sentry-trace_id=9ffef7b14fef40b3bd2e466e13219bb9,sentry-sampled=false,sentry-sample_rand=0.22013458521750728,sentry-sample_rate=0.1\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 11 Jan 2026 02:02:24 GMT\r\ncontent-type: text/x-component\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nx-nextjs-rewritten-path: /marulabet.com\u0026blue\u0026en/second-design/vip\r\nx-middleware-rewrite: /marulabet.com\u0026blue\u0026en/second-design/vip?_rsc=1jkk3\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch, Accept-Encoding\r\nx-nextjs-cache: HIT\r\nx-nextjs-prerender: 1\r\nx-nextjs-postponed: 2\r\ncache-control: s-maxage=600, stale-while-revalidate=31535400\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=obSI7NUcXFy4tthQ3VGCZovtJxg17HdJLi3Dt6KEEB%2Bw7fkjhnicoDK3s7KlDMi10chTQH7lHmSMNEuy7VG7UEvoNw6TxiJzz%2Fbp\"}]}\r\ncf-ray: 9bc0d4f128f756ae-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1965,"size_decoded":0,"mime_type":"text/x-component","magic":"ASCII text, with very long lines (1444)","md5":"6c421767d164700bb202c9c9dc5a75f1","sha1":"3307eee16bcd0354b14a8bc46fe024d0cfa83dc8","sha256":"1bde8df6c6a1bdd59c977fe118261690fa64a378821417905e1f73dc387b07a4","sha512":"da5bff3cd87a9f3e0299e5382e754348a6ae99f592871f64568466c98ff9a5a02dfcad92dcce2da0a0da9f42d2d0612d95ab29e1815cc95b53a6e4a04ad84467","ssdeep":"","tlshash":"f2410f7a880cec8e5a67c959086ff31a160d1677c6701e7adaaccd0e19c602e5f60f90","first_seen":"2026-01-11T02:03:05.226237Z","last_seen":"2026-01-11T02:03:05.226237Z","times_seen":1,"resource_available":false,"data":null}},"time_used":92,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":92,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-11","alert":"Sinkholed","trigger":"marulabet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"marulabet.com/_next/static/chunks/b56bfb8753f2111d.js","fqdn":"marulabet.com","domain":"marulabet.com","tld":"com"},"ip":{"addr":"104.21.14.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://marulabet.com/","date":"2026-01-11T02:02:24.956Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"marulabet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Dec 2025 13:13:09 GMT","end":"Mon, 30 Mar 2026 14:11:58 GMT"},"fingerprint":{"sha1":"FA:EA:E7:29:47:4D:0C:8A:97:DE:34:6B:B0:73:EC:0F:02:FE:A8:70","sha256":"70:01:CE:F8:9D:67:13:DC:31:37:03:2C:22:AB:68:81:D6:DE:0C:E8:5F:F1:92:32:46:D8:04:E1:9A:38:2E:AD"}}},"request":{"raw":"GET /_next/static/chunks/b56bfb8753f2111d.js HTTP/1.1\r\nHost: marulabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://marulabet.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 11 Jan 2026 02:02:25 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Sat, 27 Dec 2025 18:15:14 GMT\r\netag: W/\"7175-19b61059350\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BbK6Fzm3AEGFj8nagvh%2BvJplk1ORVo3HlCpcAucJjmQBIP6ip9Nz7twZRiU8H5oOccILKt4KBfF3Ujbb60lefVAOQldNaWJ%2FQOlx\"}]}\r\ncf-ray: 9bc0d4f1f90156ae-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":29045,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (28688)","md5":"5e68a13c76892f30a85efabb13d82ca1","sha1":"966afd56bd2dd10ac30443a969c57de7820276eb","sha256":"143ac296f86033ddcd6f04439e75754aef4136412b75872a710be987fd05f423","sha512":"7efb5a92b6fb9e7cf28fe24b78c7cd93aaa393bbf28dad89e0445c7790de25405e6caf21dbba8602c134dc70d37361234d9425cb1487dee4b6e331616451ac12","ssdeep":"384:u2HyPM3ojR4oAQgGTH1BS8UEHMupcS3hHgrhiiGE6oSmLSpfz7SG2n6:u2Hy4lCHdMup3hHOiiGN54Spfz126","tlshash":"b2d2c7e33112f4728adfe2efa0a70466a33d26189409453c7d7a9d8d326d6447297f3b","first_seen":"2026-01-11T01:55:53.570094Z","last_seen":"2026-02-19T17:02:28.73521Z","times_seen":73,"resource_available":true,"data":null}},"time_used":60,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":60,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-11","alert":"Sinkholed","trigger":"marulabet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"marulabet.com/_next/static/chunks/8f1fc96221dad20a.js","fqdn":"marulabet.com","domain":"marulabet.com","tld":"com"},"ip":{"addr":"104.21.14.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://marulabet.com/","date":"2026-01-11T02:02:20.403Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"marulabet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Dec 2025 13:13:09 GMT","end":"Mon, 30 Mar 2026 14:11:58 GMT"},"fingerprint":{"sha1":"FA:EA:E7:29:47:4D:0C:8A:97:DE:34:6B:B0:73:EC:0F:02:FE:A8:70","sha256":"70:01:CE:F8:9D:67:13:DC:31:37:03:2C:22:AB:68:81:D6:DE:0C:E8:5F:F1:92:32:46:D8:04:E1:9A:38:2E:AD"}}},"request":{"raw":"GET /_next/static/chunks/8f1fc96221dad20a.js HTTP/1.1\r\nHost: marulabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://marulabet.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 11 Jan 2026 02:02:20 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Sat, 03 Jan 2026 18:08:43 GMT\r\netag: W/\"7d2a-19b850c1ff8\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=A6siYT8Ajrn4dPyCbT5V81LbYWYyo5QxHF7CkSolvz3%2BMBZDvO7w8IwvFTfWyd0zmgCDlQ9bsF0uz0SZTgdsK8FyyvsHNo0tCnG3\"}]}\r\ncf-ray: 9bc0d4d4e81b56ae-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":32042,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (31685)","md5":"a07101e5d5470ae1a07a5d4c168bb678","sha1":"11f2bd09683c7b5e0b7c53320cf50be1af02e324","sha256":"10afd1167ba6314a7902268dafa53c226bcbd340ef3a68b247f62e300f601c8d","sha512":"b8249cbe14ac291b074198aa6dd37e9d1ca780b5f2a678922e8e989d4c6158034dd354cd498a049973d2c9618beafa689482b4b2c784d9a2d7c7ce11ada63c4f","ssdeep":"384:z1zkIxdnFg8sBi9caqU/jJrRWYfPdnqGDUr+DxQbCQlHSgOE++ZCaHv:zBkIxRFPIyHdY+DxQbCQlE+lHv","tlshash":"4ce2d690d110b8f86c6b89eea5bd801d712d5b24c61d4b39b1bf3ebc13486c47e53b9a","first_seen":"2026-01-11T01:55:53.463006Z","last_seen":"2026-01-11T02:03:05.290145Z","times_seen":2,"resource_available":false,"data":null}},"time_used":113,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":78,"receive":35,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-11","alert":"Sinkholed","trigger":"marulabet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"marulabet.com/_next/static/chunks/648d22484f84f498.js","fqdn":"marulabet.com","domain":"marulabet.com","tld":"com"},"ip":{"addr":"104.21.14.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://marulabet.com/","date":"2026-01-11T02:02:20.437Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"marulabet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Dec 2025 13:13:09 GMT","end":"Mon, 30 Mar 2026 14:11:58 GMT"},"fingerprint":{"sha1":"FA:EA:E7:29:47:4D:0C:8A:97:DE:34:6B:B0:73:EC:0F:02:FE:A8:70","sha256":"70:01:CE:F8:9D:67:13:DC:31:37:03:2C:22:AB:68:81:D6:DE:0C:E8:5F:F1:92:32:46:D8:04:E1:9A:38:2E:AD"}}},"request":{"raw":"GET /_next/static/chunks/648d22484f84f498.js HTTP/1.1\r\nHost: marulabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://marulabet.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 11 Jan 2026 02:02:20 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Wed, 07 Jan 2026 17:32:54 GMT\r\netag: W/\"9fd3-19b9984c570\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=R7mmuYqB%2B3rzI1PIbapzNwE2izFPWrIIPqm3eYMz0mIQ0ZkZI9R2%2BdU6ut9VcMdM5UW%2BzFMAsPfLY8BmmA0bnQ2I6m%2FaRIwqujZl\"}]}\r\ncf-ray: 9bc0d4d5183156ae-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":40915,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (40558)","md5":"d4073791e699b4e56fe2d5e62900c51f","sha1":"527e04bb61bcdb974765083ff5e890c601e5fb4c","sha256":"0455e25dd50900b59241b19731e846d615c9bc87dba58b87ed41b2f3fa461036","sha512":"89d2761b44973a4bf41256f92f2123faed8660f8d9c99e2efe0e7ef38445af6a7661d5f44e16e85fec0987810f44152231801f716710522f53b5f536834a20bd","ssdeep":"768:8Aco3d/bYvcIF52OZSSQcn26fGSxdohWtwYbF5cPL4m+SOHL9a:8edYU6fT2WduADcPLrQL0","tlshash":"9203a669d35063bcadc543b056265070754e15af30ead37897aac4a0b6d30ecd2af8ef","first_seen":"2026-01-11T01:55:53.519421Z","last_seen":"2026-01-11T02:03:05.291528Z","times_seen":2,"resource_available":false,"data":null}},"time_used":102,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":65,"receive":37,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-11","alert":"Sinkholed","trigger":"marulabet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"marulabet.com/_next/static/chunks/05145d05e36be492.js","fqdn":"marulabet.com","domain":"marulabet.com","tld":"com"},"ip":{"addr":"104.21.14.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://marulabet.com/","date":"2026-01-11T02:02:20.462Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"marulabet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Dec 2025 13:13:09 GMT","end":"Mon, 30 Mar 2026 14:11:58 GMT"},"fingerprint":{"sha1":"FA:EA:E7:29:47:4D:0C:8A:97:DE:34:6B:B0:73:EC:0F:02:FE:A8:70","sha256":"70:01:CE:F8:9D:67:13:DC:31:37:03:2C:22:AB:68:81:D6:DE:0C:E8:5F:F1:92:32:46:D8:04:E1:9A:38:2E:AD"}}},"request":{"raw":"GET /_next/static/chunks/05145d05e36be492.js HTTP/1.1\r\nHost: marulabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://marulabet.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 11 Jan 2026 02:02:20 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Wed, 07 Jan 2026 17:32:53 GMT\r\netag: W/\"18e4-19b9984c188\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=m6kfAuV5M5Jh2lHSoUIjx9H4FGZgjAmOIOkeVWY0oh7Eq4D8hmLen1%2BLB61%2BcrFXhHufIHI0nwRb%2F6SHVvZPUglsNk2jJ%2FUz5RcP\"}]}\r\ncf-ray: 9bc0d4d5483956ae-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6372,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (6015)","md5":"df11433f60ed7f342092035883b5c929","sha1":"b0c128f84102217442c729304bf2290f1bc59603","sha256":"52dcfd85418fa3a4c864c30c47e04d057e3c6c5c2296033c6b05e373d54aac02","sha512":"1e35063b738a314f64ffa283484cd68c52f487e7bf445fc830cf906c15a1334bbd50b5381623f9008d86dc6645e9502974c762f6ed8b7f321e61481d7c57b921","ssdeep":"96:fWKeBCnhVoVxdHSV+FdytGFbUp+nOlURqSWj8HfQd4roakQBoajmj88p+qjFx84:fW04zkV+Fd7bi+O6bWjme9plf","tlshash":"a9d167e7b78533b0904d437012237112b2be39bf32cfd8a58aac45c4595d49ca76fc8a","first_seen":"2026-01-11T01:55:53.45068Z","last_seen":"2026-01-11T02:03:05.292803Z","times_seen":2,"resource_available":true,"data":null}},"time_used":76,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":70,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-11","alert":"Sinkholed","trigger":"marulabet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"marulabet.com/group/table?_rsc=r54j0","fqdn":"marulabet.com","domain":"marulabet.com","tld":"com"},"ip":{"addr":"104.21.14.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://marulabet.com/","date":"2026-01-11T02:02:23.396Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"marulabet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Dec 2025 13:13:09 GMT","end":"Mon, 30 Mar 2026 14:11:58 GMT"},"fingerprint":{"sha1":"FA:EA:E7:29:47:4D:0C:8A:97:DE:34:6B:B0:73:EC:0F:02:FE:A8:70","sha256":"70:01:CE:F8:9D:67:13:DC:31:37:03:2C:22:AB:68:81:D6:DE:0C:E8:5F:F1:92:32:46:D8:04:E1:9A:38:2E:AD"}}},"request":{"raw":"GET /group/table?_rsc=r54j0 HTTP/1.1\r\nHost: marulabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://marulabet.com/\r\nrsc: 1\r\nnext-router-prefetch: 1\r\nnext-router-segment-prefetch: /_tree\r\nnext-url: /marulabet.com%26blue%26en/second-design\r\nsentry-trace: 9ffef7b14fef40b3bd2e466e13219bb9-bc2517098d3668bd-0\r\nbaggage: sentry-environment=production,sentry-release=web%402.7.0,sentry-public_key=6d319d1014d598ea4a0365923853ee67,sentry-trace_id=9ffef7b14fef40b3bd2e466e13219bb9,sentry-sampled=false,sentry-sample_rand=0.22013458521750728,sentry-sample_rate=0.1\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 11 Jan 2026 02:02:23 GMT\r\ncontent-type: text/x-component\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nx-nextjs-rewritten-path: /marulabet.com\u0026blue\u0026en/second-design/group/table\r\nx-middleware-rewrite: /marulabet.com\u0026blue\u0026en/second-design/group/table?_rsc=r54j0\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch, Accept-Encoding\r\nx-nextjs-cache: HIT\r\nx-nextjs-prerender: 1\r\nx-nextjs-postponed: 2\r\ncache-control: s-maxage=600, stale-while-revalidate=31535400\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=i2AEhzaei9cossVUwcK99CCX6oFTkCi49gi6NO2PIMpPGV94GGggfb4mrHfI81RxSPKOVUvrmfZUARiwHhJA%2Brtf2Xsius5Wq%2F8i\"}]}\r\ncf-ray: 9bc0d4e8389d56ae-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2576,"size_decoded":0,"mime_type":"text/x-component","magic":"ASCII text, with very long lines (1067)","md5":"5df54d5b6adb1d30c19645d8a8349d12","sha1":"ff0ef7b324dd60ccc6090c5dd18a9c7803c8a378","sha256":"348d93e5c8fcfa531ff9c11a4f746e919bda70dd4624261f97f5b417841ee449","sha512":"d80600139d1af670134efc241793f350bf40c65f68c0f38614b308673934d5ff08f4c4250a2ef33db7d4510c98a40e48fcc6569c86d3f4378274408d624357a1","ssdeep":"","tlshash":"2251af0cc8486db498d9d59962d5d7016654af3bf1b88cbce04bdc54138f03d0baab87","first_seen":"2026-01-11T02:03:05.29395Z","last_seen":"2026-01-11T02:03:05.29395Z","times_seen":1,"resource_available":false,"data":null}},"time_used":160,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":160,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-11","alert":"Sinkholed","trigger":"marulabet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"marulabet.com/second-design/ranks/iron2.webp","fqdn":"marulabet.com","domain":"marulabet.com","tld":"com"},"ip":{"addr":"104.21.14.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://marulabet.com/","date":"2026-01-11T02:02:23.806Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"marulabet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Dec 2025 13:13:09 GMT","end":"Mon, 30 Mar 2026 14:11:58 GMT"},"fingerprint":{"sha1":"FA:EA:E7:29:47:4D:0C:8A:97:DE:34:6B:B0:73:EC:0F:02:FE:A8:70","sha256":"70:01:CE:F8:9D:67:13:DC:31:37:03:2C:22:AB:68:81:D6:DE:0C:E8:5F:F1:92:32:46:D8:04:E1:9A:38:2E:AD"}}},"request":{"raw":"GET /second-design/ranks/iron2.webp HTTP/1.1\r\nHost: marulabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://marulabet.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 11 Jan 2026 02:02:23 GMT\r\ncontent-type: image/webp\r\ncontent-length: 6118\r\npriority: u=4,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Sat, 27 Dec 2025 17:40:05 GMT\r\netag: W/\"17e6-19b60e56679\"\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=inVJUK04AC%2Bb8gUJp2OUvbMW%2FPwPNhjUWUb4QC6vf%2FDlMN%2B6C%2F7M1eIarnSw%2Bd3p4ghFQheE8L2S6zRH0T%2BHU3g6v7lqqYvAmqgP\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9bc0d4eab8b856ae-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6118,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"d28114b48ac18944215523860da3a5c7","sha1":"28362795f12361cc91e2f6e07105b8c9fc3edf09","sha256":"5dc83996a07a764a4857682d8787b8227d5459b226769596d67a29c678d16c99","sha512":"d66a50afbbab7f802d7ee838a865d1dc0e8499b3ea3c83f164677f43fb503d35c85dde4c8b254aad28b85c52bcab62624bc608f31e9d9e4c7d2b0bd89687432e","ssdeep":"96:WyAJFk2Vi06XAhJK5gi6XehC021eJoeDO5uCuKSBtQKdy6J3Dw/+Athr2GWho:YJBVsyRXcC02IdQuU6Ji+mrmo","tlshash":"9fc18ec362fcd24eee805cabfc32418ddc14ddd24e602bba5d8d9d006525e2e3a1984e","first_seen":"2026-01-11T01:55:53.50367Z","last_seen":"2026-02-13T04:13:07.677692Z","times_seen":46,"resource_available":false,"data":null}},"time_used":74,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":73,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-11","alert":"Sinkholed","trigger":"marulabet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"marulabet.com/?action=register\u0026_rsc=1x23p","fqdn":"marulabet.com","domain":"marulabet.com","tld":"com"},"ip":{"addr":"104.21.14.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://marulabet.com/","date":"2026-01-11T02:02:24.124Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"marulabet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Dec 2025 13:13:09 GMT","end":"Mon, 30 Mar 2026 14:11:58 GMT"},"fingerprint":{"sha1":"FA:EA:E7:29:47:4D:0C:8A:97:DE:34:6B:B0:73:EC:0F:02:FE:A8:70","sha256":"70:01:CE:F8:9D:67:13:DC:31:37:03:2C:22:AB:68:81:D6:DE:0C:E8:5F:F1:92:32:46:D8:04:E1:9A:38:2E:AD"}}},"request":{"raw":"GET /?action=register\u0026_rsc=1x23p HTTP/1.1\r\nHost: marulabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://marulabet.com/\r\nrsc: 1\r\nnext-router-prefetch: 1\r\nnext-router-segment-prefetch: /!KHVzZXItc2lkZSk/$d$M/second-design/!KGhvbWUp/__PAGE__\r\nnext-url: /marulabet.com%26blue%26en/second-design\r\nsentry-trace: 9ffef7b14fef40b3bd2e466e13219bb9-a83b2aa0a0f453c7-0\r\nbaggage: sentry-environment=production,sentry-release=web%402.7.0,sentry-public_key=6d319d1014d598ea4a0365923853ee67,sentry-trace_id=9ffef7b14fef40b3bd2e466e13219bb9,sentry-sampled=false,sentry-sample_rand=0.22013458521750728,sentry-sample_rate=0.1\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 11 Jan 2026 02:02:24 GMT\r\ncontent-type: text/x-component\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nx-nextjs-rewritten-path: /marulabet.com\u0026blue\u0026en/second-design\r\nx-nextjs-rewritten-query: action=register\r\nx-middleware-rewrite: /marulabet.com\u0026blue\u0026en/second-design?action=register\u0026_rsc=1x23p\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch, Accept-Encoding\r\nx-nextjs-cache: HIT\r\nx-nextjs-prerender: 1\r\nx-nextjs-postponed: 2\r\ncache-control: s-maxage=600, stale-while-revalidate=31535400\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TiuFWVXInmBaJkLLGaDTf0MI9i4ZXSDTic5UOzXitVobupLG611wMV1Eq2iFRzLCxJITsIN4Wl%2Fo4KUZjiKU4g%2BKbTaBYGIWYdoT\"}]}\r\ncf-ray: 9bc0d4ecc8ce56ae-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":35887,"size_decoded":0,"mime_type":"text/x-component","magic":"Unicode text, UTF-8 text, with very long lines (13666)","md5":"13c9dd8be5059d8578175c01992de962","sha1":"a7dcc946f1928d4186f300356dc8fab9c18f21b6","sha256":"12a4a4e285a84e60bacede54e955e6ca9d6ad93d7b1d1aab5e50fa29dce547f2","sha512":"5abd59d4afcbc30fc4bc6d307cdb7457e0bf1be5d0cbe64df34c18534c865042308b621ea40892d29436b000a9e3d7c731432efb32e9d11eae42274b3073da1b","ssdeep":"384:+CGCmCbC2CAC8CuW4J8A9SOT3Qb9KRT3Qg9ShuLzg710siCi:+9lo5NlY4TsOSQRjshM850siCi","tlshash":"20f2bd67c40aec984a2ade0c288f1b2ae0ed9d7398f41cacb61ddd7c814dc575f4a197","first_seen":"2026-01-11T01:55:53.440838Z","last_seen":"2026-01-11T02:03:05.299218Z","times_seen":2,"resource_available":false,"data":null}},"time_used":95,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":95,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-11","alert":"Sinkholed","trigger":"marulabet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"marulabet.com/blog?_rsc=1dmuo","fqdn":"marulabet.com","domain":"marulabet.com","tld":"com"},"ip":{"addr":"104.21.14.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://marulabet.com/","date":"2026-01-11T02:02:24.644Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"marulabet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Dec 2025 13:13:09 GMT","end":"Mon, 30 Mar 2026 14:11:58 GMT"},"fingerprint":{"sha1":"FA:EA:E7:29:47:4D:0C:8A:97:DE:34:6B:B0:73:EC:0F:02:FE:A8:70","sha256":"70:01:CE:F8:9D:67:13:DC:31:37:03:2C:22:AB:68:81:D6:DE:0C:E8:5F:F1:92:32:46:D8:04:E1:9A:38:2E:AD"}}},"request":{"raw":"GET /blog?_rsc=1dmuo HTTP/1.1\r\nHost: marulabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://marulabet.com/\r\nrsc: 1\r\nnext-router-prefetch: 1\r\nnext-router-segment-prefetch: /!KHVzZXItc2lkZSk/$d$M/second-design/!KGhvbWUp/blog/__PAGE__\r\nnext-url: /marulabet.com%26blue%26en/second-design\r\nsentry-trace: 9ffef7b14fef40b3bd2e466e13219bb9-8a637b5ab173e824-0\r\nbaggage: sentry-environment=production,sentry-release=web%402.7.0,sentry-public_key=6d319d1014d598ea4a0365923853ee67,sentry-trace_id=9ffef7b14fef40b3bd2e466e13219bb9,sentry-sampled=false,sentry-sample_rand=0.22013458521750728,sentry-sample_rate=0.1\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 11 Jan 2026 02:02:24 GMT\r\ncontent-type: text/x-component\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nx-nextjs-rewritten-path: /marulabet.com\u0026blue\u0026en/second-design/blog\r\nx-middleware-rewrite: /marulabet.com\u0026blue\u0026en/second-design/blog?_rsc=1dmuo\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch, Accept-Encoding\r\nx-nextjs-cache: HIT\r\nx-nextjs-prerender: 1\r\nx-nextjs-postponed: 2\r\ncache-control: s-maxage=600, stale-while-revalidate=31535400\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rhfYCfFzJJp2ErTAWFZ6a07Sm0zLtEKGFZOpBO%2FCea9ikqj3pa1d55vUHsTS9fsOaTm9FB7%2B0OsR7xBNynQO9%2FEVd7dZq0ipUiZe\"}]}\r\ncf-ray: 9bc0d4f008f056ae-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":220952,"size_decoded":0,"mime_type":"text/x-component","magic":"Unicode text, UTF-8 text, with very long lines (1879)","md5":"859b16cf9f2cd1cd4036a80a4f9f1e68","sha1":"11a8b664afc8a81e0e49af58a16f7c5958e951ad","sha256":"741ed4a3c67bf66068d99cc09dee369f3562d032f2ca6439dc07de9e5000386a","sha512":"400b5a4e80104a75977de339f5038588c8912ada746b56141980f498387d5783c998d7f3c67b9c42fe59bba58c33f38c56c6a0631b692df7dd0bc1c8ac8a0cbf","ssdeep":"3072:NyI2liLaJ0X346Tmcxy21qx8+ba1Dk/7pL:OJa346BMaGp","tlshash":"23241916bb1c31b007e3055b376a32ddd63a9014633665ede9aec06c236a33e8736e5d","first_seen":"2026-01-11T02:03:05.300739Z","last_seen":"2026-01-11T02:03:05.300739Z","times_seen":1,"resource_available":false,"data":null}},"time_used":194,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":93,"receive":101,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-11","alert":"Sinkholed","trigger":"marulabet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"marulabet.com/group/live?_rsc=1ss1o","fqdn":"marulabet.com","domain":"marulabet.com","tld":"com"},"ip":{"addr":"104.21.14.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://marulabet.com/","date":"2026-01-11T02:02:25.220Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"marulabet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Dec 2025 13:13:09 GMT","end":"Mon, 30 Mar 2026 14:11:58 GMT"},"fingerprint":{"sha1":"FA:EA:E7:29:47:4D:0C:8A:97:DE:34:6B:B0:73:EC:0F:02:FE:A8:70","sha256":"70:01:CE:F8:9D:67:13:DC:31:37:03:2C:22:AB:68:81:D6:DE:0C:E8:5F:F1:92:32:46:D8:04:E1:9A:38:2E:AD"}}},"request":{"raw":"GET /group/live?_rsc=1ss1o HTTP/1.1\r\nHost: marulabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://marulabet.com/\r\nrsc: 1\r\nnext-router-prefetch: 1\r\nnext-router-segment-prefetch: /!KHVzZXItc2lkZSk/$d$M/second-design/!KGhvbWUp/group/$d$group/__PAGE__\r\nnext-url: /marulabet.com%26blue%26en/second-design\r\nsentry-trace: 9ffef7b14fef40b3bd2e466e13219bb9-9478971f619cb822-0\r\nbaggage: sentry-environment=production,sentry-release=web%402.7.0,sentry-public_key=6d319d1014d598ea4a0365923853ee67,sentry-trace_id=9ffef7b14fef40b3bd2e466e13219bb9,sentry-sampled=false,sentry-sample_rand=0.22013458521750728,sentry-sample_rate=0.1\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 11 Jan 2026 02:02:25 GMT\r\ncontent-type: text/x-component\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nx-nextjs-rewritten-path: /marulabet.com\u0026blue\u0026en/second-design/group/live\r\nx-middleware-rewrite: /marulabet.com\u0026blue\u0026en/second-design/group/live?_rsc=1ss1o\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch, Accept-Encoding\r\nx-nextjs-cache: HIT\r\nx-nextjs-prerender: 1\r\nx-nextjs-postponed: 2\r\ncache-control: s-maxage=600, stale-while-revalidate=31535400\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=l3oKVF%2F7jlRGphB4HAC%2FD9KSxDh9BJkcUTDbRawQHkU%2BhbQTU86Ol%2BGF8%2F56yURfnodtgVyetbFYzq9FjFoQTVjC0LqDjAG%2BY2Ll\"}]}\r\ncf-ray: 9bc0d4f3a91156ae-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9598,"size_decoded":0,"mime_type":"text/x-component","magic":"ASCII text, with very long lines (7322)","md5":"de724b8238f22e86b0def354772c0419","sha1":"253edaf9dc9cfd23783c055a142ed4c46ea135a0","sha256":"07f678f743fa541c2bd3dd07896bd0fa6d7a402b65c11b6a1c2e76c71d3e31db","sha512":"1a8d5e98c96ae645607a0b7922a79766136a5eec152d2de6e7e2649974022141a2516a196023062efc747eaa8e55c0d3b7e48801f5f3ee5440553108977124d1","ssdeep":"192:W8K9tXzg5G+EeUBbba8rjgjiW4hHhm7s3v:W8CkJO3Dx","tlshash":"0b12f0bac4568c99461f9f0424cb2e0ef0ad2d3364d81ca8b91dee7cd45dc57ab0b197","first_seen":"2026-01-11T01:55:53.476445Z","last_seen":"2026-01-11T02:03:05.302054Z","times_seen":2,"resource_available":false,"data":null}},"time_used":113,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":108,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-11","alert":"Sinkholed","trigger":"marulabet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"marulabet.com/_next/static/chunks/68808784ff1e3793.js","fqdn":"marulabet.com","domain":"marulabet.com","tld":"com"},"ip":{"addr":"104.21.14.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://marulabet.com/","date":"2026-01-11T02:02:20.391Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"marulabet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Dec 2025 13:13:09 GMT","end":"Mon, 30 Mar 2026 14:11:58 GMT"},"fingerprint":{"sha1":"FA:EA:E7:29:47:4D:0C:8A:97:DE:34:6B:B0:73:EC:0F:02:FE:A8:70","sha256":"70:01:CE:F8:9D:67:13:DC:31:37:03:2C:22:AB:68:81:D6:DE:0C:E8:5F:F1:92:32:46:D8:04:E1:9A:38:2E:AD"}}},"request":{"raw":"GET /_next/static/chunks/68808784ff1e3793.js HTTP/1.1\r\nHost: marulabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://marulabet.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 11 Jan 2026 02:02:20 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Tue, 06 Jan 2026 19:23:38 GMT\r\netag: W/\"8714-19b94c3ca90\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=j1WjlKEEWEdUQv0gpxBGM%2FfqOqBz0e06Bp8OJ9c6lh0diZIIdhrB6MzNFljhWJJi0Y3LdxyAnB0%2FF7HpuZIQ792Hbg%2FAXr3y%2Bp2H\"}]}\r\ncf-ray: 9bc0d4d4d81456ae-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":34580,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (21945)","md5":"8cd831247fb39382e68c0c41db93bdb8","sha1":"0500312511754cf07938e847d07dd74a39dacfa4","sha256":"04f740eea2305c37d40e72b0cd099a2118194b7b12752244d42ce5625daaa5cf","sha512":"3bbbd4956145a47a9c8e3654b8fb30dc71272480c633b159762e837b309af6bf4e17be7462e755244f301e7553e478ffb9a13da245987d681a21db79ce952d7f","ssdeep":"768:pAIXI6KJxc6jNLEXinvE/96UJGSgf5djPh0gC:yJ9NLAins/96UJGSgf5djPh0gC","tlshash":"fcf20849f022dd7b363bc1fd90ac1866716d0d28d2191f24f2ff8aad130498935abb78","first_seen":"2026-01-11T01:55:53.448091Z","last_seen":"2026-01-11T02:03:05.303252Z","times_seen":2,"resource_available":false,"data":null}},"time_used":124,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":77,"receive":47,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-11","alert":"Sinkholed","trigger":"marulabet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"marulabet.com/op1.js?v=1.1.2","fqdn":"marulabet.com","domain":"marulabet.com","tld":"com"},"ip":{"addr":"104.21.14.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://marulabet.com/","date":"2026-01-11T02:02:20.470Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"marulabet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Dec 2025 13:13:09 GMT","end":"Mon, 30 Mar 2026 14:11:58 GMT"},"fingerprint":{"sha1":"FA:EA:E7:29:47:4D:0C:8A:97:DE:34:6B:B0:73:EC:0F:02:FE:A8:70","sha256":"70:01:CE:F8:9D:67:13:DC:31:37:03:2C:22:AB:68:81:D6:DE:0C:E8:5F:F1:92:32:46:D8:04:E1:9A:38:2E:AD"}}},"request":{"raw":"GET /op1.js?v=1.1.2 HTTP/1.1\r\nHost: marulabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://marulabet.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 11 Jan 2026 02:02:20 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\naccept-ranges: bytes\r\ncache-control: public, max-age=14400\r\nlast-modified: Tue, 23 Sep 2025 19:28:51 GMT\r\netag: W/\"12ac-199780cd538\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: EXPIRED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0Njjh41OYMBS8rLLlXoCxj%2B88cBCNNCyfUKzwGxBfEwjvFnIgwJOxWdbNpxWEvb7exjgWg2JnS8nO8d6EDtsxdsoN89Y%2F5w1wAJH\"}]}\r\ncf-ray: 9bc0d4d5483f56ae-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4780,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (4779)","md5":"7e70a945dae20db5c3ba723775ded1fb","sha1":"881446882a8156d42ef4bb0fd07b514bfea3015a","sha256":"3c8dd924bfde73ec39e5872541bbe103809a55eeb3ba96b6fb9ebf75799f38df","sha512":"391c68f9e017a8cb850c48d4aabcde7cb82c08dc48b3c555ac5c0b9b0085588dbdaad393bfb785064b603f0dfe55d8fb1baf77c3f24ce2015b06b8214ab16761","ssdeep":"96:3JTLJ3+YlrT6yyP0mjnGzmLBHd4Lbgm+tpUQAl:3B1O6yPRjG6lHd4/gm+tJC","tlshash":"e8a197e772de35b24bfa70d6d1613443f7281aa5280a101cb758addb148890ae3e6fb4","first_seen":"2025-02-07T08:54:17.669398Z","last_seen":"2026-01-11T02:03:05.304338Z","times_seen":98,"resource_available":true,"data":null}},"time_used":105,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":103,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-11","alert":"Sinkholed","trigger":"marulabet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"wss","addr":"marulabet.com/api/socket.io/?EIO=4\u0026transport=websocket\u0026sid=Ppq5ZA92h5AuiYkIAl0Q","fqdn":"marulabet.com","domain":"marulabet.com","tld":"com"},"ip":{"addr":"104.21.14.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://marulabet.com/","date":"2026-01-11T02:02:22.421Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"marulabet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Dec 2025 13:13:09 GMT","end":"Mon, 30 Mar 2026 14:11:58 GMT"},"fingerprint":{"sha1":"FA:EA:E7:29:47:4D:0C:8A:97:DE:34:6B:B0:73:EC:0F:02:FE:A8:70","sha256":"70:01:CE:F8:9D:67:13:DC:31:37:03:2C:22:AB:68:81:D6:DE:0C:E8:5F:F1:92:32:46:D8:04:E1:9A:38:2E:AD"}}},"request":{"raw":"GET /api/socket.io/?EIO=4\u0026transport=websocket\u0026sid=Ppq5ZA92h5AuiYkIAl0Q HTTP/1.1\r\nHost: marulabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nSec-WebSocket-Version: 13\r\nOrigin: https://marulabet.com\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: fYRKyeP3rCQwL16Mcr8SOw==\r\nDNT: 1\r\nConnection: keep-alive, Upgrade\r\nSec-Fetch-Dest: websocket\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 101 Switching Protocols\r\nDate: Sun, 11 Jan 2026 02:02:22 GMT\r\nConnection: upgrade\r\nUpgrade: websocket\r\nSec-WebSocket-Accept: nJ+2KGcNaT7KC4uLlfc0KB88kuM=\r\nAccess-Control-Allow-Origin: *\r\ncf-cache-status: DYNAMIC\r\nReport-To: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=m2HYXa9fOqLXuiq8TLor4sOqZgRQjPgv0yp4nGAGRL43ROopMfCB561q7Oz0jaFhw6iHKilsw%2FIuNpmUxgEy6jgkI2H5NQnQ%2FWyq2dwmT5JPyGa%2Fu464w0yOP%2BEozcsN\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nNEL: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nServer: cloudflare\r\nCF-RAY: 9bc0d4e26c8e7129-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=472\u0026min_rtt=430\u0026rtt_var=158\u0026sent=5\u0026recv=8\u0026lost=0\u0026retrans=0\u0026sent_bytes=3117\u0026recv_bytes=1219\u0026delivery_rate=7541666\u0026cwnd=252\u0026unsent_bytes=0\u0026cid=43814ba3441f08a7\u0026ts=166\u0026x=0\"\r\n\r\n","headers":null,"cookies":null,"status_code":"101","status_text":"Switching Protocols","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-05T14:03:25.26362Z","times_seen":17725631,"resource_available":true,"data":null}},"time_used":214,"timings":{"blocked":-1,"dns":22,"connect":21,"send":0,"wait":149,"receive":1,"ssl":41},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-11","alert":"Sinkholed","trigger":"marulabet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"marulabet.com/games_new_webp/plinko.webp","fqdn":"marulabet.com","domain":"marulabet.com","tld":"com"},"ip":{"addr":"104.21.14.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://marulabet.com/","date":"2026-01-11T02:02:22.481Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"marulabet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Dec 2025 13:13:09 GMT","end":"Mon, 30 Mar 2026 14:11:58 GMT"},"fingerprint":{"sha1":"FA:EA:E7:29:47:4D:0C:8A:97:DE:34:6B:B0:73:EC:0F:02:FE:A8:70","sha256":"70:01:CE:F8:9D:67:13:DC:31:37:03:2C:22:AB:68:81:D6:DE:0C:E8:5F:F1:92:32:46:D8:04:E1:9A:38:2E:AD"}}},"request":{"raw":"GET /games_new_webp/plinko.webp HTTP/1.1\r\nHost: marulabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://marulabet.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 11 Jan 2026 02:02:22 GMT\r\ncontent-type: image/webp\r\ncontent-length: 2356\r\npriority: u=4,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Thu, 01 Jan 2026 18:08:42 GMT\r\netag: W/\"934-19b7abf6410\"\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RpTsj2m8of30a1To1AFivGfbeq0JyXwXu1P53TqgshY%2FUZH2%2F75%2FTqTJvdEis3OPyH3CXFNgZ47%2FHdyLDChcuYzGaGHFnwvTaPfh\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9bc0d4e2888456ae-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2356,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 208x257, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"b7d9d76919e7318a5ab3820f0b2acf39","sha1":"799ca8a6f171111e9a5327dcd6164fa7f048750f","sha256":"293bc6e6d78141aeed6e9e5a9ab93672246c8242e29c205adaeb711cd3985011","sha512":"28d4db6fe84750a2b3544e1ebb9fbff3fbf485aad0e9a904463ed8bc9c424e40343a090814bd0743dcd25220c95bb87e49d053c1b6986ed60aec3def0a634450","ssdeep":"","tlshash":"c9415db53ea2cce67145276fa4abc9084cb09bc175c63807c2e87ae4825b6184ec584c","first_seen":"2026-01-11T01:55:53.452287Z","last_seen":"2026-02-19T17:02:28.805601Z","times_seen":73,"resource_available":false,"data":null}},"time_used":56,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":54,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-11","alert":"Sinkholed","trigger":"marulabet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"marulabet.com/group/shows?_rsc=r54j0","fqdn":"marulabet.com","domain":"marulabet.com","tld":"com"},"ip":{"addr":"104.21.14.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://marulabet.com/","date":"2026-01-11T02:02:23.399Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"marulabet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Dec 2025 13:13:09 GMT","end":"Mon, 30 Mar 2026 14:11:58 GMT"},"fingerprint":{"sha1":"FA:EA:E7:29:47:4D:0C:8A:97:DE:34:6B:B0:73:EC:0F:02:FE:A8:70","sha256":"70:01:CE:F8:9D:67:13:DC:31:37:03:2C:22:AB:68:81:D6:DE:0C:E8:5F:F1:92:32:46:D8:04:E1:9A:38:2E:AD"}}},"request":{"raw":"GET /group/shows?_rsc=r54j0 HTTP/1.1\r\nHost: marulabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://marulabet.com/\r\nrsc: 1\r\nnext-router-prefetch: 1\r\nnext-router-segment-prefetch: /_tree\r\nnext-url: /marulabet.com%26blue%26en/second-design\r\nsentry-trace: 9ffef7b14fef40b3bd2e466e13219bb9-9a27f063ddaec3a4-0\r\nbaggage: sentry-environment=production,sentry-release=web%402.7.0,sentry-public_key=6d319d1014d598ea4a0365923853ee67,sentry-trace_id=9ffef7b14fef40b3bd2e466e13219bb9,sentry-sampled=false,sentry-sample_rand=0.22013458521750728,sentry-sample_rate=0.1\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 11 Jan 2026 02:02:23 GMT\r\ncontent-type: text/x-component\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nx-nextjs-rewritten-path: /marulabet.com\u0026blue\u0026en/second-design/group/shows\r\nx-middleware-rewrite: /marulabet.com\u0026blue\u0026en/second-design/group/shows?_rsc=r54j0\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch, Accept-Encoding\r\nx-nextjs-cache: HIT\r\nx-nextjs-prerender: 1\r\nx-nextjs-postponed: 2\r\ncache-control: s-maxage=600, stale-while-revalidate=31535400\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3vwz9%2BZRegprUS6GtqE58485QAT0OcEdg6jRNObTjdIIZFG2hkVHgSuu3Q9yWenN3Ypo9KRvuzHPUPpf7flmX%2FH8lfwggp6Uub70\"}]}\r\ncf-ray: 9bc0d4e8489e56ae-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2576,"size_decoded":0,"mime_type":"text/x-component","magic":"ASCII text, with very long lines (1067)","md5":"32e41912705cd0becaf0ed09a18aa747","sha1":"987d83563ca09e821f049967b15709558d467e33","sha256":"1a10b45019be7a1483aacc1b02187b317999313e32c45e6ae48d514d6017e848","sha512":"9f0768f54c68263f15b8add25f8d72516b900411f222f117c92e609246c50391ae59439de942263dcccd92bd724b521bd69260515e05168efd77f5b9681fc671","ssdeep":"","tlshash":"3751af0cc8486db498d9d59962d5d7016654af3bf1b88dbce04bdc54138f03d0baab87","first_seen":"2026-01-11T02:03:05.306566Z","last_seen":"2026-01-11T02:03:05.306566Z","times_seen":1,"resource_available":false,"data":null}},"time_used":157,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":157,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-11","alert":"Sinkholed","trigger":"marulabet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"marulabet.com/games_new_webp/pragmatic-play-mighty-munching-melons.webp","fqdn":"marulabet.com","domain":"marulabet.com","tld":"com"},"ip":{"addr":"104.21.14.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://marulabet.com/","date":"2026-01-11T02:02:23.767Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"marulabet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Dec 2025 13:13:09 GMT","end":"Mon, 30 Mar 2026 14:11:58 GMT"},"fingerprint":{"sha1":"FA:EA:E7:29:47:4D:0C:8A:97:DE:34:6B:B0:73:EC:0F:02:FE:A8:70","sha256":"70:01:CE:F8:9D:67:13:DC:31:37:03:2C:22:AB:68:81:D6:DE:0C:E8:5F:F1:92:32:46:D8:04:E1:9A:38:2E:AD"}}},"request":{"raw":"GET /games_new_webp/pragmatic-play-mighty-munching-melons.webp HTTP/1.1\r\nHost: marulabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://marulabet.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 11 Jan 2026 02:02:23 GMT\r\ncontent-type: image/webp\r\ncontent-length: 29130\r\npriority: u=4,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Thu, 01 Jan 2026 18:08:12 GMT\r\netag: W/\"71ca-19b7abeeee0\"\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=s1JdeGYfq0vygu5YH0APubjsBVgabiHcGA%2BCaTMbxX26hx6J21dAhi5t1DpM0%2FlBMRDHBMWWfIU4Uu7SbT7k3kTypQYojgNsShO4\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9bc0d4ea68a956ae-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":29130,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"c535947051d0c49f33a79ded06adb615","sha1":"0b961e04fc1691de7055a170cb2f22bf59cfb488","sha256":"709dbfc20d59000a93a352a8c16e3f3183835f1433c2a8834d4301ecd4f6c624","sha512":"789e0f12b01246196b0d6f954350fdc7d2b5379c413bc4d4fcd8edbd5813c4d5625c2d10996a1b29421a0033bdd22ab22d398b371f07982c36ab87024cc912be","ssdeep":"768:NKA2Nz9Dzq9CQO9pHDEzqpjxMlhhKHIc5FHMvBTzLvp:NKLDKtO/j1IOHIUHMvL","tlshash":"5fd2e0dc4decaf1de19a4bf41a228e0092f66218e044c1b6c9075d98fde0b596fc95e6","first_seen":"2026-01-11T02:03:05.307903Z","last_seen":"2026-01-11T02:03:05.307903Z","times_seen":1,"resource_available":false,"data":null}},"time_used":76,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":64,"receive":12,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-11","alert":"Sinkholed","trigger":"marulabet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"marulabet.com/games_new_webp/pragmatic-play-book-of-golden-sands.webp","fqdn":"marulabet.com","domain":"marulabet.com","tld":"com"},"ip":{"addr":"104.21.14.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://marulabet.com/","date":"2026-01-11T02:02:23.813Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"marulabet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Dec 2025 13:13:09 GMT","end":"Mon, 30 Mar 2026 14:11:58 GMT"},"fingerprint":{"sha1":"FA:EA:E7:29:47:4D:0C:8A:97:DE:34:6B:B0:73:EC:0F:02:FE:A8:70","sha256":"70:01:CE:F8:9D:67:13:DC:31:37:03:2C:22:AB:68:81:D6:DE:0C:E8:5F:F1:92:32:46:D8:04:E1:9A:38:2E:AD"}}},"request":{"raw":"GET /games_new_webp/pragmatic-play-book-of-golden-sands.webp HTTP/1.1\r\nHost: marulabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://marulabet.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 11 Jan 2026 02:02:23 GMT\r\ncontent-type: image/webp\r\ncontent-length: 42642\r\npriority: u=4,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Thu, 01 Jan 2026 18:08:47 GMT\r\netag: W/\"a692-19b7abf7798\"\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=o8lbaV35EKfsyGEhDNuk92jAAU8ZUNybWqxfZoZBYMBOkbWXRROnPttjy2TTJCcUMI8x2P9dkiltBE82fMDIZ25Bc7apND1zwjfo\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9bc0d4eab8bd56ae-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":42642,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"45da6df81eaaab54e316ed7ec65ad691","sha1":"74ec460271093c7d281be8576a13e5cbb00c212c","sha256":"54c6cdba1a468b53593373e8a3086cada097cc2bc24c5a769237cb914c328800","sha512":"89d0b4a01fcb4bcad06ef22d4e12ed97805a3eb9679245aad62478d71522fd4177e4004b94b8e00708fa9de79b946dbb890150ea6e8053bb74ecb348dcf94abc","ssdeep":"768:iKSBwJ4URaVHnMhzpOQMsjQrw40HTz8Uf5raAkoR5u+gQHGCPjlI+1v6ECYZs:7SBw6xRnQpOQ/M048TpfZZaip1AYi","tlshash":"8f130285c624233ec1c8aef045f70c4f1b532e49666ed1bc9abe269b61354e0bc991cf","first_seen":"2026-01-11T02:03:05.309117Z","last_seen":"2026-01-11T02:03:05.309117Z","times_seen":1,"resource_available":false,"data":null}},"time_used":70,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":66,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-11","alert":"Sinkholed","trigger":"marulabet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"marulabet.com/_next/static/chunks/c58f412fbc7bc65c.js","fqdn":"marulabet.com","domain":"marulabet.com","tld":"com"},"ip":{"addr":"104.21.14.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://marulabet.com/","date":"2026-01-11T02:02:20.452Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"marulabet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Dec 2025 13:13:09 GMT","end":"Mon, 30 Mar 2026 14:11:58 GMT"},"fingerprint":{"sha1":"FA:EA:E7:29:47:4D:0C:8A:97:DE:34:6B:B0:73:EC:0F:02:FE:A8:70","sha256":"70:01:CE:F8:9D:67:13:DC:31:37:03:2C:22:AB:68:81:D6:DE:0C:E8:5F:F1:92:32:46:D8:04:E1:9A:38:2E:AD"}}},"request":{"raw":"GET /_next/static/chunks/c58f412fbc7bc65c.js HTTP/1.1\r\nHost: marulabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://marulabet.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 11 Jan 2026 02:02:20 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Sat, 27 Dec 2025 18:15:15 GMT\r\netag: W/\"1bf1-19b61059738\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cZHX6vjvJny1biPMLOvO2F16x1ogMFarmgCVMId8WD3%2BRhl9k3WkhZKzq05r39HKnPZBgi01KO0hGNs0fIxC8aWDiAIfj7pgg9Dr\"}]}\r\ncf-ray: 9bc0d4d5283456ae-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7153,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (6796)","md5":"86d343f85d9d7ebf96d60346fd3702de","sha1":"bdd0409bb94740483a1000e56c3274a43e11c1a1","sha256":"7f99ce582d49a7b5224ef18764c66b72f6315f60f24b2535115b7078c60b4045","sha512":"7eca24a490f109ed7801b9858979438c7689020876fb192d427cbe00269ce52a67d6db4773e10da8701d8f5762ae6ba3bb2c7c116adb5ce8042047a394aa7055","ssdeep":"192:wGBqNt9FpeD025QPiPL/xCZtR9pW2gWQfNXG:pBwDyhKiPwX8S","tlshash":"29e1d8f07610a6642bbb01da8039822ca56d3638612f8134d4bedc7d6769d8d6273ef7","first_seen":"2026-01-11T01:55:53.499813Z","last_seen":"2026-01-11T02:03:05.310351Z","times_seen":2,"resource_available":true,"data":null}},"time_used":76,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":68,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-11","alert":"Sinkholed","trigger":"marulabet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"marulabet.com/icons/coinsIcons/busd.svg","fqdn":"marulabet.com","domain":"marulabet.com","tld":"com"},"ip":{"addr":"104.21.14.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://marulabet.com/","date":"2026-01-11T02:02:21.008Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"marulabet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Dec 2025 13:13:09 GMT","end":"Mon, 30 Mar 2026 14:11:58 GMT"},"fingerprint":{"sha1":"FA:EA:E7:29:47:4D:0C:8A:97:DE:34:6B:B0:73:EC:0F:02:FE:A8:70","sha256":"70:01:CE:F8:9D:67:13:DC:31:37:03:2C:22:AB:68:81:D6:DE:0C:E8:5F:F1:92:32:46:D8:04:E1:9A:38:2E:AD"}}},"request":{"raw":"GET /icons/coinsIcons/busd.svg HTTP/1.1\r\nHost: marulabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://marulabet.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 11 Jan 2026 02:02:21 GMT\r\ncontent-type: image/svg+xml\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Zc7XZQND6TfxB7yKwcJSAqhdzfOOhw0DZGhwQHucmetkEQqA3JH1wVGkq%2BeMeeNBpCn2A8wAxgk9mMOgmg6zxQOE%2B0ehTF3WP7oq\"}]}\r\npriority: u=4,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: br\r\nlast-modified: Tue, 23 Sep 2025 19:28:51 GMT\r\netag: W/\"210-199780cd538\"\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9bc0d4d9385356ae-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":528,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"8705fd81e119294bc526887bc154e5c5","sha1":"f0c483201922ebf93d938fd9f1b4f1896e81bede","sha256":"d303bbcd89a42382dd9383f9e86568ad84c835a09cd9399303008c7389d5d7d7","sha512":"2130e252feed6d15b8229599bd9687775066bed42134776ab62a832eebb3af2460fefd82016ce538613f3af8181d33852625f972ff7ceaf260c1b3e878620726","ssdeep":"","tlshash":"9ef0599b521d1e3ea51b82ad57891341e4ad70afc2a984fc64e6307ec104df96c9db43","first_seen":"2023-05-19T19:08:22Z","last_seen":"2026-07-27T14:50:57.483925Z","times_seen":42,"resource_available":false,"data":null}},"time_used":55,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":55,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-11","alert":"Sinkholed","trigger":"marulabet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"marulabet.com/api/auth/getSession","fqdn":"marulabet.com","domain":"marulabet.com","tld":"com"},"ip":{"addr":"104.21.14.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://marulabet.com/","date":"2026-01-11T02:02:21.790Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"marulabet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Dec 2025 13:13:09 GMT","end":"Mon, 30 Mar 2026 14:11:58 GMT"},"fingerprint":{"sha1":"FA:EA:E7:29:47:4D:0C:8A:97:DE:34:6B:B0:73:EC:0F:02:FE:A8:70","sha256":"70:01:CE:F8:9D:67:13:DC:31:37:03:2C:22:AB:68:81:D6:DE:0C:E8:5F:F1:92:32:46:D8:04:E1:9A:38:2E:AD"}}},"request":{"raw":"GET /api/auth/getSession HTTP/1.1\r\nHost: marulabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://marulabet.com/\r\nContent-Type: application/json\r\nAuthorization: Bearer undefined\r\nsentry-trace: 9ffef7b14fef40b3bd2e466e13219bb9-940774e5bfc83cf5-0\r\nbaggage: sentry-environment=production,sentry-release=web%402.7.0,sentry-public_key=6d319d1014d598ea4a0365923853ee67,sentry-trace_id=9ffef7b14fef40b3bd2e466e13219bb9,sentry-sampled=false,sentry-sample_rand=0.22013458521750728,sentry-sample_rate=0.1\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 401 Unauthorized\r\nserver: cloudflare\r\ndate: Sun, 11 Jan 2026 02:02:21 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncontent-length: 43\r\npriority: u=4,i=?0\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\netag: W/\"2b-dGnJzt6gv1nJjX6DJ9RztDWptng\"\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1W0VBuYAio7jVUIrQ8a%2BOT6TlV948flnXXaFhyQL0V6F4SN%2B%2BBock4Xg7uQERWyAXzobvBuRxujIC5QtkokFK71zfLI%2BiQFPDMpb\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9bc0d4de286b56ae-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"401","status_text":"Unauthorized","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":43,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"a35da7b2f88e0b2a1d5ebe0ec06102bd","sha1":"7469c9cedea0bf59c98d7e8327d473b435a9b678","sha256":"e1654c7ad9ce4df238c7c18cafe8b85a27ac81155501831fcb1583963308e9a5","sha512":"62b900bf1f8d35e3df1cac72810891745f874b0dfd4bcdc5da1a3f761cc1cbb934f7aa5c65f3c2692aa48860f0384333933fb3fa7d4051254ab4a3935f6adabd","ssdeep":"","tlshash":"f790040014043d3777514105710c5535cc13447c51411053154c453c45435c44007500","first_seen":"2023-10-23T05:59:08Z","last_seen":"2026-08-02T17:34:41.895811Z","times_seen":453,"resource_available":false,"data":null}},"time_used":147,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":142,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-11","alert":"Sinkholed","trigger":"marulabet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"marulabet.com/?type=lobby\u0026_rsc=r54j0","fqdn":"marulabet.com","domain":"marulabet.com","tld":"com"},"ip":{"addr":"104.21.14.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://marulabet.com/","date":"2026-01-11T02:02:23.980Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"marulabet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Dec 2025 13:13:09 GMT","end":"Mon, 30 Mar 2026 14:11:58 GMT"},"fingerprint":{"sha1":"FA:EA:E7:29:47:4D:0C:8A:97:DE:34:6B:B0:73:EC:0F:02:FE:A8:70","sha256":"70:01:CE:F8:9D:67:13:DC:31:37:03:2C:22:AB:68:81:D6:DE:0C:E8:5F:F1:92:32:46:D8:04:E1:9A:38:2E:AD"}}},"request":{"raw":"GET /?type=lobby\u0026_rsc=r54j0 HTTP/1.1\r\nHost: marulabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://marulabet.com/\r\nrsc: 1\r\nnext-router-prefetch: 1\r\nnext-router-segment-prefetch: /_tree\r\nnext-url: /marulabet.com%26blue%26en/second-design\r\nsentry-trace: 9ffef7b14fef40b3bd2e466e13219bb9-843649af91dc45b2-0\r\nbaggage: sentry-environment=production,sentry-release=web%402.7.0,sentry-public_key=6d319d1014d598ea4a0365923853ee67,sentry-trace_id=9ffef7b14fef40b3bd2e466e13219bb9,sentry-sampled=false,sentry-sample_rand=0.22013458521750728,sentry-sample_rate=0.1\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 11 Jan 2026 02:02:24 GMT\r\ncontent-type: text/x-component\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nx-nextjs-rewritten-path: /marulabet.com\u0026blue\u0026en/second-design\r\nx-nextjs-rewritten-query: type=lobby\r\nx-middleware-rewrite: /marulabet.com\u0026blue\u0026en/second-design?type=lobby\u0026_rsc=r54j0\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch, Accept-Encoding\r\nx-nextjs-cache: HIT\r\nx-nextjs-prerender: 1\r\nx-nextjs-postponed: 2\r\ncache-control: s-maxage=600, stale-while-revalidate=31535400\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=V%2Fu3WsozyzEla9T%2BaAg%2F%2BCE6skcW47z5rY7u1qvlz0GMNhqkL8QL%2BgSwlPcuuSB5O%2BpMdoTuuZXgjt5NGKx8I1%2FGNh681nXAVZdj\"}]}\r\ncf-ray: 9bc0d4ebe8c556ae-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2333,"size_decoded":0,"mime_type":"text/x-component","magic":"ASCII text, with very long lines (824)","md5":"6692d7ef9eec533159bb5395328be1c6","sha1":"0b2a9e2255b68734cc3d0861aad1c9f452ecdfa3","sha256":"28f8817de7e458b38061ed4462ee3d2c092cc6b93dde09569f0cae3b480a4184","sha512":"50db858ff850252a14f071bd616fc4f2713a399aa2f13c3d35e521acee21313175145af615c409289c821606b4d2e9b7974e18eb6f61f3bde056fea40e5c344f","ssdeep":"","tlshash":"2a419e0cc8499eb498c9d59a61d5d7016558bf37f1b88dace04bdca4038b03d0feab87","first_seen":"2026-01-11T02:03:05.260326Z","last_seen":"2026-01-11T02:03:05.260326Z","times_seen":1,"resource_available":false,"data":null}},"time_used":97,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":97,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-11","alert":"Sinkholed","trigger":"marulabet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"marulabet.com/?action=register\u0026_rsc=1ays9","fqdn":"marulabet.com","domain":"marulabet.com","tld":"com"},"ip":{"addr":"104.21.14.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://marulabet.com/","date":"2026-01-11T02:02:24.104Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"marulabet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Dec 2025 13:13:09 GMT","end":"Mon, 30 Mar 2026 14:11:58 GMT"},"fingerprint":{"sha1":"FA:EA:E7:29:47:4D:0C:8A:97:DE:34:6B:B0:73:EC:0F:02:FE:A8:70","sha256":"70:01:CE:F8:9D:67:13:DC:31:37:03:2C:22:AB:68:81:D6:DE:0C:E8:5F:F1:92:32:46:D8:04:E1:9A:38:2E:AD"}}},"request":{"raw":"GET /?action=register\u0026_rsc=1ays9 HTTP/1.1\r\nHost: marulabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://marulabet.com/\r\nrsc: 1\r\nnext-router-prefetch: 1\r\nnext-router-segment-prefetch: /!KHVzZXItc2lkZSk/$d$M\r\nnext-url: /marulabet.com%26blue%26en/second-design\r\nsentry-trace: 9ffef7b14fef40b3bd2e466e13219bb9-995fc076708da455-0\r\nbaggage: sentry-environment=production,sentry-release=web%402.7.0,sentry-public_key=6d319d1014d598ea4a0365923853ee67,sentry-trace_id=9ffef7b14fef40b3bd2e466e13219bb9,sentry-sampled=false,sentry-sample_rand=0.22013458521750728,sentry-sample_rate=0.1\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 11 Jan 2026 02:02:24 GMT\r\ncontent-type: text/x-component\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nx-nextjs-rewritten-path: /marulabet.com\u0026blue\u0026en/second-design\r\nx-nextjs-rewritten-query: action=register\r\nx-middleware-rewrite: /marulabet.com\u0026blue\u0026en/second-design?action=register\u0026_rsc=1ays9\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch, Accept-Encoding\r\nx-nextjs-cache: HIT\r\nx-nextjs-prerender: 1\r\nx-nextjs-postponed: 2\r\ncache-control: s-maxage=600, stale-while-revalidate=31535400\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=L7lglibjXHIUgvDt4nJeNIocbm7poB7B0h9gOmNoQk%2Bh4Y%2BC2GrJekgFELjkRgsKqJT8s6ejGeJp5Y9wjewSqtWsUKwXA7wu%2BLqm\"}]}\r\ncf-ray: 9bc0d4eca8cb56ae-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":520,"size_decoded":0,"mime_type":"text/x-component","magic":"ASCII text","md5":"cae286cc5150ca9e140002b466382032","sha1":"808cbc33e587c522661c3a71f7c9a2f4593ee43c","sha256":"9349b2186e1004b44bee7c066fdd6957343d7d566c713868881e88769e334aa7","sha512":"b1c732329240455085c84a12e473d8986e5fe1abc1fcf0e71e30fe2312ae09bc31d5e4c37944b3427ae36b99e276ee07fdb591a051fc9b39959ce970274a3b7e","ssdeep":"","tlshash":"1af027a3d40dee291d3dcc8c0e5e6363855d8c7fdab12ab992acce6c068513a1b496c0","first_seen":"2026-01-11T01:55:53.415353Z","last_seen":"2026-01-11T02:03:05.218009Z","times_seen":2,"resource_available":false,"data":null}},"time_used":92,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":92,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-11","alert":"Sinkholed","trigger":"marulabet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"marulabet.com/group/shows?_rsc=1gi4n","fqdn":"marulabet.com","domain":"marulabet.com","tld":"com"},"ip":{"addr":"104.21.14.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://marulabet.com/","date":"2026-01-11T02:02:25.072Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"marulabet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Dec 2025 13:13:09 GMT","end":"Mon, 30 Mar 2026 14:11:58 GMT"},"fingerprint":{"sha1":"FA:EA:E7:29:47:4D:0C:8A:97:DE:34:6B:B0:73:EC:0F:02:FE:A8:70","sha256":"70:01:CE:F8:9D:67:13:DC:31:37:03:2C:22:AB:68:81:D6:DE:0C:E8:5F:F1:92:32:46:D8:04:E1:9A:38:2E:AD"}}},"request":{"raw":"GET /group/shows?_rsc=1gi4n HTTP/1.1\r\nHost: marulabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://marulabet.com/\r\nrsc: 1\r\nnext-router-prefetch: 1\r\nnext-router-segment-prefetch: /!KHVzZXItc2lkZSk/$d$M/second-design/!KGhvbWUp/group/$d$group\r\nnext-url: /marulabet.com%26blue%26en/second-design\r\nsentry-trace: 9ffef7b14fef40b3bd2e466e13219bb9-b24be8f0a53a29a3-0\r\nbaggage: sentry-environment=production,sentry-release=web%402.7.0,sentry-public_key=6d319d1014d598ea4a0365923853ee67,sentry-trace_id=9ffef7b14fef40b3bd2e466e13219bb9,sentry-sampled=false,sentry-sample_rand=0.22013458521750728,sentry-sample_rate=0.1\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 11 Jan 2026 02:02:25 GMT\r\ncontent-type: text/x-component\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nx-nextjs-rewritten-path: /marulabet.com\u0026blue\u0026en/second-design/group/shows\r\nx-middleware-rewrite: /marulabet.com\u0026blue\u0026en/second-design/group/shows?_rsc=1gi4n\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch, Accept-Encoding\r\nx-nextjs-cache: HIT\r\nx-nextjs-prerender: 1\r\nx-nextjs-postponed: 2\r\ncache-control: s-maxage=600, stale-while-revalidate=31535400\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=EJn65XKHn6Py%2BlyJN955EjHXWKUS7aD4fGa1n7VSuIBi6n0Yy9VXWsIlrRYHVWFqdX4eREy6AUzpx0fr2wwm5c9eDlaJLDYeOiDI\"}]}\r\ncf-ray: 9bc0d4f2b90a56ae-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":520,"size_decoded":0,"mime_type":"text/x-component","magic":"ASCII text","md5":"cae286cc5150ca9e140002b466382032","sha1":"808cbc33e587c522661c3a71f7c9a2f4593ee43c","sha256":"9349b2186e1004b44bee7c066fdd6957343d7d566c713868881e88769e334aa7","sha512":"b1c732329240455085c84a12e473d8986e5fe1abc1fcf0e71e30fe2312ae09bc31d5e4c37944b3427ae36b99e276ee07fdb591a051fc9b39959ce970274a3b7e","ssdeep":"","tlshash":"1af027a3d40dee291d3dcc8c0e5e6363855d8c7fdab12ab992acce6c068513a1b496c0","first_seen":"2026-01-11T01:55:53.415353Z","last_seen":"2026-01-11T02:03:05.218009Z","times_seen":2,"resource_available":false,"data":null}},"time_used":126,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":125,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-11","alert":"Sinkholed","trigger":"marulabet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"marulabet.com/_next/static/media/Inter_Bold-s.p.fbbe7604.ttf","fqdn":"marulabet.com","domain":"marulabet.com","tld":"com"},"ip":{"addr":"104.21.14.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://marulabet.com/","date":"2026-01-11T02:02:21.675Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"marulabet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Dec 2025 13:13:09 GMT","end":"Mon, 30 Mar 2026 14:11:58 GMT"},"fingerprint":{"sha1":"FA:EA:E7:29:47:4D:0C:8A:97:DE:34:6B:B0:73:EC:0F:02:FE:A8:70","sha256":"70:01:CE:F8:9D:67:13:DC:31:37:03:2C:22:AB:68:81:D6:DE:0C:E8:5F:F1:92:32:46:D8:04:E1:9A:38:2E:AD"}}},"request":{"raw":"GET /_next/static/media/Inter_Bold-s.p.fbbe7604.ttf HTTP/1.1\r\nHost: marulabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://marulabet.com/_next/static/chunks/a85c5f2112ae0905.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 11 Jan 2026 02:02:21 GMT\r\ncontent-type: font/ttf\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Wed, 07 Jan 2026 18:59:37 GMT\r\netag: W/\"65560-19b99d429a8\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nage: 84137\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=L8oPw1f%2Bd1GaXzWIj7TSdepxRDskocBtNLCZB4ZQ5llitv6dZilj032Mz7s7Bd%2BJq3Mm2Ta0GnlugXdqkq3Hte1OGf1l6sQPaGLQ\"}]}\r\ncf-ray: 9bc0d4dd786556ae-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":415072,"size_decoded":0,"mime_type":"font/ttf","magic":"TrueType Font data, 17 tables, 1st \"GDEF\", 35 names, Microsoft, language 0x409, Copyright 2016 The Inter Project AuthorsInterBold4.000;git-a52131595;RSMS;Inter-BoldInter BoldVe","md5":"8f2869a84ad71f156a17bb66611ebe22","sha1":"0325b9b3992fa2fdc9c715730a33135696c68a39","sha256":"0cb1bc1335372d9e3a0cf6f5311c7cce87af90d2a777fdeec18be605a2a70bc1","sha512":"3d4315d591dcf7609c15b3e32bcc234659fcdbe4be24aef5dba4ad248ad42fd9ab082250244f99dc801ec21575b7400aace50a1e8834d5c33404e76a0caac834","ssdeep":"12288:k9zC2w597PziK+bSvkK3sgUN8HkC48AeIVMhQ/8:e4iK+6I/8","tlshash":"ff946a1bf701e70eca562c388af59bd033b9bc91791ee24b705a3a09dd971b40ad71e4","first_seen":"2024-07-29T21:54:31Z","last_seen":"2026-08-04T16:44:03.325774Z","times_seen":329,"resource_available":false,"data":null}},"time_used":67,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":59,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-11","alert":"Sinkholed","trigger":"marulabet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"marulabet.com/_next/static/chunks/0086609c4b45b46a.js","fqdn":"marulabet.com","domain":"marulabet.com","tld":"com"},"ip":{"addr":"104.21.14.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://marulabet.com/","date":"2026-01-11T02:02:20.383Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"marulabet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Dec 2025 13:13:09 GMT","end":"Mon, 30 Mar 2026 14:11:58 GMT"},"fingerprint":{"sha1":"FA:EA:E7:29:47:4D:0C:8A:97:DE:34:6B:B0:73:EC:0F:02:FE:A8:70","sha256":"70:01:CE:F8:9D:67:13:DC:31:37:03:2C:22:AB:68:81:D6:DE:0C:E8:5F:F1:92:32:46:D8:04:E1:9A:38:2E:AD"}}},"request":{"raw":"GET /_next/static/chunks/0086609c4b45b46a.js HTTP/1.1\r\nHost: marulabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://marulabet.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 11 Jan 2026 02:02:20 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Tue, 06 Jan 2026 19:23:38 GMT\r\netag: W/\"6c5-19b94c3ca90\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qMncKtC18mxn%2FizSQJw%2FhL%2Fdl1fRXhG44zHL8NS154YKFM71a1EPMbznKGtbMpFB6Wuuw1MDmn2rO6sww4f33BJYBQZIqYw%2B7xiy\"}]}\r\ncf-ray: 9bc0d4d4d81056ae-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1733,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (1376)","md5":"fc9886ef696d06ff5fff4ef75aca4bd1","sha1":"2cfcf905752c66882e2dce10ee68c3fee7feef61","sha256":"246b7d86430e932d357cbea32d51fd4513b2bbe42f53e12199a9dee6102f15c7","sha512":"fa15e6b658bf0cf3473cc585637432f9fbdbd6dcc44cd4bd505dd037fd9c2688968e8a74a69d6aa0e0346bfed6c254c59b9c849a468d0b829c2d4a3e57464d19","ssdeep":"","tlshash":"7f3160445550a6ae742500fc903b400e64a61fb9c31daf32e0bc387b26619c9be267db","first_seen":"2026-01-11T01:55:53.418747Z","last_seen":"2026-01-11T02:03:05.312514Z","times_seen":2,"resource_available":true,"data":null}},"time_used":84,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":77,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-11","alert":"Sinkholed","trigger":"marulabet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"marulabet.com/_next/static/chunks/f11d6cac8b7abbe8.js","fqdn":"marulabet.com","domain":"marulabet.com","tld":"com"},"ip":{"addr":"104.21.14.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://marulabet.com/","date":"2026-01-11T02:02:20.407Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"marulabet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Dec 2025 13:13:09 GMT","end":"Mon, 30 Mar 2026 14:11:58 GMT"},"fingerprint":{"sha1":"FA:EA:E7:29:47:4D:0C:8A:97:DE:34:6B:B0:73:EC:0F:02:FE:A8:70","sha256":"70:01:CE:F8:9D:67:13:DC:31:37:03:2C:22:AB:68:81:D6:DE:0C:E8:5F:F1:92:32:46:D8:04:E1:9A:38:2E:AD"}}},"request":{"raw":"GET /_next/static/chunks/f11d6cac8b7abbe8.js HTTP/1.1\r\nHost: marulabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://marulabet.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 11 Jan 2026 02:02:20 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Sat, 27 Dec 2025 18:15:14 GMT\r\netag: W/\"1bddb-19b61059350\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=AfUHNrxDsQA0omkDZmMED4p2YT9zr5cPuB1WGWbgwKV%2FGsAMg6C%2FFxyb%2FDob1NsefnV%2BPQcSC8pG19TEOXYtPyI3xXLG7lYbbKOA\"}]}\r\ncf-ray: 9bc0d4d4f81e56ae-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":114139,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (40008)","md5":"3bab676b40db46b8261b0a9d4bc54f52","sha1":"6ccaae573ff926da4eea4c3a8926de4e02dda521","sha256":"803b1e3aef19a28fa26477a51f7d5e095041fbec6e6c1b1c0ace7fee1341f469","sha512":"b6d03477c21eb7f96331911ec82a946933ad486cb828371af546aae0aff53fec9c8c0cfc28c102ac1fc1c34b1b9917cde760c248250bff02d865ce198dd8b753","ssdeep":"1536:0/dh98r/PHotK7JewjFSqE4eRlU7wugwoL5CLOrObU5W/Nzh9QxqHt+HX0R5:5vCSJ7F+ObU5W/N7t+HXc","tlshash":"c9b33c953200b83589ef83fff04645a9f73c2609c5099424f97e9dee232c6a57257b3a","first_seen":"2026-01-11T01:55:53.498889Z","last_seen":"2026-01-11T02:03:05.313304Z","times_seen":2,"resource_available":false,"data":null}},"time_used":142,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":78,"receive":64,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-11","alert":"Sinkholed","trigger":"marulabet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"marulabet.com/_next/static/chunks/5106befed02bbbc1.js","fqdn":"marulabet.com","domain":"marulabet.com","tld":"com"},"ip":{"addr":"104.21.14.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://marulabet.com/","date":"2026-01-11T02:02:20.416Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"marulabet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Dec 2025 13:13:09 GMT","end":"Mon, 30 Mar 2026 14:11:58 GMT"},"fingerprint":{"sha1":"FA:EA:E7:29:47:4D:0C:8A:97:DE:34:6B:B0:73:EC:0F:02:FE:A8:70","sha256":"70:01:CE:F8:9D:67:13:DC:31:37:03:2C:22:AB:68:81:D6:DE:0C:E8:5F:F1:92:32:46:D8:04:E1:9A:38:2E:AD"}}},"request":{"raw":"GET /_next/static/chunks/5106befed02bbbc1.js HTTP/1.1\r\nHost: marulabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://marulabet.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 11 Jan 2026 02:02:20 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Sat, 27 Dec 2025 18:15:14 GMT\r\netag: W/\"79d2-19b61059350\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=W79vxPstjvpIEivO1fX5BdMMmJ000k4xgdLXJFtW5Szh66c6EXTGgAQWdqGzbdj%2BuGOzRVLqD9amwbqOTJUGfLVt069u81Cf6hHs\"}]}\r\ncf-ray: 9bc0d4d4f82556ae-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":31186,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (30829)","md5":"8118195f240294632123017ad2da8fd6","sha1":"4ca6934b48835fc835973be4d7767bcc76587a88","sha256":"893322fffa21a1dc9aa44ea2772fbd71d34f610e7a6a3eb20e4b1c83a81f18ac","sha512":"b066520de5f3fac2a5abdd6d25ec8b2b0a9a61178885c5dc862cddf13cea9cf1fc420971c23c178c27fe2fb3f0ffb0dbabefe405b1351d8b48e1a922869af4b1","ssdeep":"384:nw11UKxDFEhGbyy4RmOCYV3jv47bYS6B8v6vaEw3fgvm1waDSe297zL:nwcIWKyy4RhBcw8i+3fgvm1waDv2BzL","tlshash":"f7e21ba03251f0354b6b8146e0be4355f33a5616a40f403cb2bd5ced3266e8972a7ffa","first_seen":"2026-01-11T01:55:53.425162Z","last_seen":"2026-01-11T02:03:05.314119Z","times_seen":2,"resource_available":true,"data":null}},"time_used":114,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":76,"receive":38,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-11","alert":"Sinkholed","trigger":"marulabet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"marulabet.com/_next/static/chunks/4f001e2058f26059.js","fqdn":"marulabet.com","domain":"marulabet.com","tld":"com"},"ip":{"addr":"104.21.14.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://marulabet.com/","date":"2026-01-11T02:02:20.462Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"marulabet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Dec 2025 13:13:09 GMT","end":"Mon, 30 Mar 2026 14:11:58 GMT"},"fingerprint":{"sha1":"FA:EA:E7:29:47:4D:0C:8A:97:DE:34:6B:B0:73:EC:0F:02:FE:A8:70","sha256":"70:01:CE:F8:9D:67:13:DC:31:37:03:2C:22:AB:68:81:D6:DE:0C:E8:5F:F1:92:32:46:D8:04:E1:9A:38:2E:AD"}}},"request":{"raw":"GET /_next/static/chunks/4f001e2058f26059.js HTTP/1.1\r\nHost: marulabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://marulabet.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 11 Jan 2026 02:02:20 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Wed, 07 Jan 2026 17:32:54 GMT\r\netag: W/\"1bf22-19b9984c570\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3xBvQQJc5oat%2FWzt8EmAm%2Fng%2FiF7SFU7AC%2B7DaGJAd0JoY8GzV%2FagSIIlLfP0DPQHlSfPs0wl%2FIT%2FYfVovElghBnWDM%2FePWqI6j0\"}]}\r\ncf-ray: 9bc0d4d5483856ae-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":114466,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"eafd5accf1f348229058952e1c514864","sha1":"da787d661c0392d3fd1813974f81a89b82e18536","sha256":"c0922f46495039ab136a83ee7112bbc4e2624f79fd5fe42a13147fa5fb02836a","sha512":"a48ceb8d2f19524d45b9ffc5ebd9d97688fc6f7f5700ae94bf6e775a59f4a03d0db5206bca9e0f0b7a1ec76415a4c38df706a23cbfb0e486f408e06d728e1324","ssdeep":"1536:MUm+QloI9WhZm5424d4bhKrSOhVFxlMFJR:ZgKIJ94ibhl1B","tlshash":"86b3a564a0619fedfa6e04b6b42ec41cb11e1fd8c71f89a6b6bc3c7116410847fa67c6","first_seen":"2026-01-11T01:55:53.508045Z","last_seen":"2026-01-11T02:03:05.314964Z","times_seen":2,"resource_available":true,"data":null}},"time_used":99,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":75,"receive":24,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-11","alert":"Sinkholed","trigger":"marulabet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"marulabet.com/blog?_rsc=r54j0","fqdn":"marulabet.com","domain":"marulabet.com","tld":"com"},"ip":{"addr":"104.21.14.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://marulabet.com/","date":"2026-01-11T02:02:22.071Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"marulabet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Dec 2025 13:13:09 GMT","end":"Mon, 30 Mar 2026 14:11:58 GMT"},"fingerprint":{"sha1":"FA:EA:E7:29:47:4D:0C:8A:97:DE:34:6B:B0:73:EC:0F:02:FE:A8:70","sha256":"70:01:CE:F8:9D:67:13:DC:31:37:03:2C:22:AB:68:81:D6:DE:0C:E8:5F:F1:92:32:46:D8:04:E1:9A:38:2E:AD"}}},"request":{"raw":"GET /blog?_rsc=r54j0 HTTP/1.1\r\nHost: marulabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://marulabet.com/\r\nrsc: 1\r\nnext-router-prefetch: 1\r\nnext-router-segment-prefetch: /_tree\r\nnext-url: /marulabet.com%26blue%26en/second-design\r\nsentry-trace: 9ffef7b14fef40b3bd2e466e13219bb9-bdeb8b449b9be156-0\r\nbaggage: sentry-environment=production,sentry-release=web%402.7.0,sentry-public_key=6d319d1014d598ea4a0365923853ee67,sentry-trace_id=9ffef7b14fef40b3bd2e466e13219bb9,sentry-sampled=false,sentry-sample_rand=0.22013458521750728,sentry-sample_rate=0.1\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 11 Jan 2026 02:02:22 GMT\r\ncontent-type: text/x-component\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nx-nextjs-rewritten-path: /marulabet.com\u0026blue\u0026en/second-design/blog\r\nx-middleware-rewrite: /marulabet.com\u0026blue\u0026en/second-design/blog?_rsc=r54j0\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch, Accept-Encoding\r\nx-nextjs-cache: STALE\r\nx-nextjs-prerender: 1\r\nx-nextjs-postponed: 2\r\ncache-control: s-maxage=600, stale-while-revalidate=31535400\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vMHOT%2BnNqZyJvzTAB9rdA4BCSkxZHqFfuRbNFenJ29DIby%2F0ge6wAigah3GaQ2%2Fp0O%2FyT%2B%2F0BWB7Sh%2FRoKfDPO6kykDktxfyKkLm\"}]}\r\ncf-ray: 9bc0d4dff87456ae-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2453,"size_decoded":0,"mime_type":"text/x-component","magic":"ASCII text, with very long lines (944)","md5":"70bc13cc9d0c14f4dcef20c7457bcde3","sha1":"908d459fa13dc569ace10e1f2ee3a4b0a6b0424b","sha256":"1bade6413f90d77ef7e83a7ca9ef89c378fbc6aff3546d73f38e71520fbb7039","sha512":"1568259be0ea33541ce9969785a6028e1cd53c11c166102f8feb9d5bca937f1085679b347b931a8e7ae53c106cbd092d72fe10f631e1f2b9326a6bc42da9ac19","ssdeep":"","tlshash":"d5519e0dc8499db498c9d59e61d5d7016658af3bf1b88dace04bdc64038f03d0beab87","first_seen":"2026-01-11T02:03:05.325391Z","last_seen":"2026-01-11T02:03:05.325391Z","times_seen":1,"resource_available":false,"data":null}},"time_used":326,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":326,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-11","alert":"Sinkholed","trigger":"marulabet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"marulabet.com/games_new_webp/pragmatic-play-aztec-gems-deluxe.webp","fqdn":"marulabet.com","domain":"marulabet.com","tld":"com"},"ip":{"addr":"104.21.14.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://marulabet.com/","date":"2026-01-11T02:02:23.771Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"marulabet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Dec 2025 13:13:09 GMT","end":"Mon, 30 Mar 2026 14:11:58 GMT"},"fingerprint":{"sha1":"FA:EA:E7:29:47:4D:0C:8A:97:DE:34:6B:B0:73:EC:0F:02:FE:A8:70","sha256":"70:01:CE:F8:9D:67:13:DC:31:37:03:2C:22:AB:68:81:D6:DE:0C:E8:5F:F1:92:32:46:D8:04:E1:9A:38:2E:AD"}}},"request":{"raw":"GET /games_new_webp/pragmatic-play-aztec-gems-deluxe.webp HTTP/1.1\r\nHost: marulabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://marulabet.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 11 Jan 2026 02:02:23 GMT\r\ncontent-type: image/webp\r\ncontent-length: 48256\r\npriority: u=4,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Thu, 01 Jan 2026 18:08:30 GMT\r\netag: W/\"bc80-19b7abf3530\"\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=EK8aiHfNXh03FG2D18nG3FlfURJyzfxDor%2FHkd%2Bj3g0Y%2FMAhD6wVAVnOzYsijFmcLF7znM8VDIcTp4dJtx8CVeVha%2BkUPApuU43i\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9bc0d4ea78ac56ae-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":48256,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 408x546, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"6471b67459f29fb533437ff73f797683","sha1":"29967ce0aee54c9fcb1e860fe6b7429582111cfd","sha256":"625408da873260b12861d29b42426497ee896890d8f2f37628d24222ed36848b","sha512":"4c746da805b7522e1e7873e311898e98f8b355db463685bcf584ef83657733642329a738780d67d5dc713d09f48cd7b17b3c58a430ca63305d0a2e83280085dd","ssdeep":"768:4sLBZnGqYL00WvmXB79lhObZ/82sftCpoQ4ssxt/IB2wUOd3LWD02uzwVu:4IBzgdWsB73hoi9gWssxtg7UOd3LWQSu","tlshash":"d323f2320932e98ebc9f8192e9e804c051bb76ca9fad4ca1d2474b76141d76b58d7d01","first_seen":"2026-01-11T02:03:05.336714Z","last_seen":"2026-02-02T19:18:43.919042Z","times_seen":2,"resource_available":false,"data":null}},"time_used":84,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":61,"receive":23,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-11","alert":"Sinkholed","trigger":"marulabet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"marulabet.com/reviews?_rsc=1jkk3","fqdn":"marulabet.com","domain":"marulabet.com","tld":"com"},"ip":{"addr":"104.21.14.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://marulabet.com/","date":"2026-01-11T02:02:24.315Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"marulabet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Dec 2025 13:13:09 GMT","end":"Mon, 30 Mar 2026 14:11:58 GMT"},"fingerprint":{"sha1":"FA:EA:E7:29:47:4D:0C:8A:97:DE:34:6B:B0:73:EC:0F:02:FE:A8:70","sha256":"70:01:CE:F8:9D:67:13:DC:31:37:03:2C:22:AB:68:81:D6:DE:0C:E8:5F:F1:92:32:46:D8:04:E1:9A:38:2E:AD"}}},"request":{"raw":"GET /reviews?_rsc=1jkk3 HTTP/1.1\r\nHost: marulabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://marulabet.com/\r\nrsc: 1\r\nnext-router-prefetch: 1\r\nnext-router-segment-prefetch: /_head\r\nnext-url: /marulabet.com%26blue%26en/second-design\r\nsentry-trace: 9ffef7b14fef40b3bd2e466e13219bb9-bbed1ebc2964ef18-0\r\nbaggage: sentry-environment=production,sentry-release=web%402.7.0,sentry-public_key=6d319d1014d598ea4a0365923853ee67,sentry-trace_id=9ffef7b14fef40b3bd2e466e13219bb9,sentry-sampled=false,sentry-sample_rand=0.22013458521750728,sentry-sample_rate=0.1\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 11 Jan 2026 02:02:24 GMT\r\ncontent-type: text/x-component\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nx-nextjs-rewritten-path: /marulabet.com\u0026blue\u0026en/second-design/reviews\r\nx-middleware-rewrite: /marulabet.com\u0026blue\u0026en/second-design/reviews?_rsc=1jkk3\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch, Accept-Encoding\r\nx-nextjs-cache: HIT\r\nx-nextjs-prerender: 1\r\nx-nextjs-postponed: 2\r\ncache-control: s-maxage=600, stale-while-revalidate=31535400\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Dm4z6pviRK3wbZe9zsfhHzWwpgvmrNwflE%2FG2bC2KFuBdevFqTVTua7TC%2FI%2FhZYeiceCKI%2BihGCPg%2BPTbvRA%2F%2BGSpo44pQmCmxGz\"}]}\r\ncf-ray: 9bc0d4ee08d556ae-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1965,"size_decoded":0,"mime_type":"text/x-component","magic":"ASCII text, with very long lines (1444)","md5":"6c421767d164700bb202c9c9dc5a75f1","sha1":"3307eee16bcd0354b14a8bc46fe024d0cfa83dc8","sha256":"1bde8df6c6a1bdd59c977fe118261690fa64a378821417905e1f73dc387b07a4","sha512":"da5bff3cd87a9f3e0299e5382e754348a6ae99f592871f64568466c98ff9a5a02dfcad92dcce2da0a0da9f42d2d0612d95ab29e1815cc95b53a6e4a04ad84467","ssdeep":"","tlshash":"f2410f7a880cec8e5a67c959086ff31a160d1677c6701e7adaaccd0e19c602e5f60f90","first_seen":"2026-01-11T02:03:05.226237Z","last_seen":"2026-01-11T02:03:05.226237Z","times_seen":1,"resource_available":false,"data":null}},"time_used":91,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":91,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-11","alert":"Sinkholed","trigger":"marulabet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"marulabet.com/_next/static/chunks/9c65e4bd40c1d306.js","fqdn":"marulabet.com","domain":"marulabet.com","tld":"com"},"ip":{"addr":"104.21.14.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://marulabet.com/","date":"2026-01-11T02:02:20.414Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"marulabet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Dec 2025 13:13:09 GMT","end":"Mon, 30 Mar 2026 14:11:58 GMT"},"fingerprint":{"sha1":"FA:EA:E7:29:47:4D:0C:8A:97:DE:34:6B:B0:73:EC:0F:02:FE:A8:70","sha256":"70:01:CE:F8:9D:67:13:DC:31:37:03:2C:22:AB:68:81:D6:DE:0C:E8:5F:F1:92:32:46:D8:04:E1:9A:38:2E:AD"}}},"request":{"raw":"GET /_next/static/chunks/9c65e4bd40c1d306.js HTTP/1.1\r\nHost: marulabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://marulabet.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 11 Jan 2026 02:02:20 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Sat, 27 Dec 2025 18:15:15 GMT\r\netag: W/\"beea-19b61059738\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yVY7E7OQLL50smVW5TI6%2BxAhyJNTtUiBHSdD8n0PvKXZETz8G%2FUXxKAbqqZn02rrPBVJWmZ%2Fpn7CsZQndZ1npo2ISv2E0UXBlAjG\"}]}\r\ncf-ray: 9bc0d4d4f82456ae-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":48874,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (48511)","md5":"f87f331025e336c1fd58e4c800b18058","sha1":"419f08dff1b9cf297a994aaafa98d91fa4d00f73","sha256":"e385c9f9bca26dbd27e9433a808f51a8acb1598baacd7e797147751636f7b27d","sha512":"647504dfe8dbd88837a58eea61c8811bad18876e5f636688348d028f7f02fba834b6749ebe7d0bfbb299285f1af81950f00619e1e29a4d45f40d6effd5ba6a68","ssdeep":"768:HT3NPN5/4OYWH7pyZpRATNxU2nwSre084SlFO1V+mtmlCg3v9aCjUeVhWqMDPSRL:z3NPN5/4OYQkz2To2nwSrex8jm3v9aCT","tlshash":"8d23c660b14171762a4343e4442e03096f3e79b4679c546bb7ac9de31e62cca467ffb2","first_seen":"2026-01-11T01:55:53.477985Z","last_seen":"2026-01-11T02:03:05.339475Z","times_seen":2,"resource_available":true,"data":null}},"time_used":111,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":64,"receive":47,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-11","alert":"Sinkholed","trigger":"marulabet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"marulabet.com/_next/static/chunks/ce91559d705a6f80.js","fqdn":"marulabet.com","domain":"marulabet.com","tld":"com"},"ip":{"addr":"104.21.14.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://marulabet.com/","date":"2026-01-11T02:02:20.431Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"marulabet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Dec 2025 13:13:09 GMT","end":"Mon, 30 Mar 2026 14:11:58 GMT"},"fingerprint":{"sha1":"FA:EA:E7:29:47:4D:0C:8A:97:DE:34:6B:B0:73:EC:0F:02:FE:A8:70","sha256":"70:01:CE:F8:9D:67:13:DC:31:37:03:2C:22:AB:68:81:D6:DE:0C:E8:5F:F1:92:32:46:D8:04:E1:9A:38:2E:AD"}}},"request":{"raw":"GET /_next/static/chunks/ce91559d705a6f80.js HTTP/1.1\r\nHost: marulabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://marulabet.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 11 Jan 2026 02:02:20 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Sat, 27 Dec 2025 18:15:15 GMT\r\netag: W/\"c28-19b61059738\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2NrjQV%2BZj90sl7WwUPp%2BmeMtenNXx3S3iHSqSnuyF9Hm9WnPev%2BkfiprvJCmlCdT1etUkmmdMPjzasQwkie6yNZ2KutGqzTru%2F1K\"}]}\r\ncf-ray: 9bc0d4d5182e56ae-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3112,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (2755)","md5":"ffca57ca28216716952658164becacfb","sha1":"558ae2e920765a2076592b4b168b3d4ddf339d5a","sha256":"bb1d593df6a0ee012c5e177fbff4f96e75910044292eb6e9d451a35eb38c2c2e","sha512":"c7bfd7c23d31e691b37e6158532f112b8c8a7cd587476f7330b4d41c6aa9e8113d2cfc819c8a4fe883caff42d186b029ed92e0f03ab20c04ca3024852228bc1b","ssdeep":"","tlshash":"2051acc21a4803bda9c691747215751393ae21bf75dfb4e4cb2d14b8c293888eb734db","first_seen":"2026-01-11T01:55:53.524258Z","last_seen":"2026-02-19T17:02:28.647973Z","times_seen":73,"resource_available":true,"data":null}},"time_used":79,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":69,"receive":10,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-11","alert":"Sinkholed","trigger":"marulabet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"marulabet.com/_next/static/chunks/3dfac233cc9e6674.js","fqdn":"marulabet.com","domain":"marulabet.com","tld":"com"},"ip":{"addr":"104.21.14.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://marulabet.com/","date":"2026-01-11T02:02:20.466Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"marulabet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Dec 2025 13:13:09 GMT","end":"Mon, 30 Mar 2026 14:11:58 GMT"},"fingerprint":{"sha1":"FA:EA:E7:29:47:4D:0C:8A:97:DE:34:6B:B0:73:EC:0F:02:FE:A8:70","sha256":"70:01:CE:F8:9D:67:13:DC:31:37:03:2C:22:AB:68:81:D6:DE:0C:E8:5F:F1:92:32:46:D8:04:E1:9A:38:2E:AD"}}},"request":{"raw":"GET /_next/static/chunks/3dfac233cc9e6674.js HTTP/1.1\r\nHost: marulabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://marulabet.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 11 Jan 2026 02:02:20 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Sat, 27 Dec 2025 18:15:15 GMT\r\netag: W/\"15b0-19b61059738\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tg4Cw%2FPvbvWRvLJ7chSjhhyLYFoVWREHgz6getpsjtfm%2BwY7zBimqsFMe%2B%2BumpLbe1e%2FPDIlZTnJPW2XEiAVLK70DO%2FTlUtc3S54\"}]}\r\ncf-ray: 9bc0d4d5483d56ae-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5552,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (5195)","md5":"dfdf96d96d75a732880ce490adb5d7d2","sha1":"0471293f4f366ce695157ccd1884d7e6cd8dd1fa","sha256":"bd922dd91a8ade5b1b81d3ac3823a46eda5aab4c25e4a64d594930eb669096c0","sha512":"9435c29d5a1ef08ece26e1a8e57b5dbbb447e4a15610fc15c8c16a1a865aeaaf233b085aff2d12ac0aaf1e7121d14d47c9ba1704eaeea3f5fe8c83dd76f4f27f","ssdeep":"96:RgjKIjI4v5ksYquBKZ/L5QXqIYF6DfRxbztE:a+RRBsh6DfRxq","tlshash":"27b100ba031ca7ec7883446833229423636fa1bf71de53b05d6fc9b055d74c8e6634a6","first_seen":"2026-01-11T01:55:53.528592Z","last_seen":"2026-01-11T02:03:05.343103Z","times_seen":2,"resource_available":true,"data":null}},"time_used":68,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":63,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-11","alert":"Sinkholed","trigger":"marulabet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"marulabet.com/_next/static/chunks/85e800e2cbb6d317.js","fqdn":"marulabet.com","domain":"marulabet.com","tld":"com"},"ip":{"addr":"104.21.14.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://marulabet.com/","date":"2026-01-11T02:02:20.469Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"marulabet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Dec 2025 13:13:09 GMT","end":"Mon, 30 Mar 2026 14:11:58 GMT"},"fingerprint":{"sha1":"FA:EA:E7:29:47:4D:0C:8A:97:DE:34:6B:B0:73:EC:0F:02:FE:A8:70","sha256":"70:01:CE:F8:9D:67:13:DC:31:37:03:2C:22:AB:68:81:D6:DE:0C:E8:5F:F1:92:32:46:D8:04:E1:9A:38:2E:AD"}}},"request":{"raw":"GET /_next/static/chunks/85e800e2cbb6d317.js HTTP/1.1\r\nHost: marulabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://marulabet.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 11 Jan 2026 02:02:20 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Tue, 06 Jan 2026 19:23:38 GMT\r\netag: W/\"6f4-19b94c3ca90\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=65rSaIL3HtpaS57V%2F%2Bh1AlApfGNav0po%2Bx6aVXHFB2Vl5Jb8FUi4PA2CMWLzALaIbPcFSvoTzDHTqWo1WIZyQ%2FmRvo7hLlQvbp3V\"}]}\r\ncf-ray: 9bc0d4d5483e56ae-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1780,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (1423)","md5":"98bca3788c690374322f66bf1ecd513c","sha1":"559a2bd4281d141d09be391db50e1fe43709487f","sha256":"0aeaef086586b732635bfdda9720957bf3b148c1ef32943a48dd1f9f20f581fa","sha512":"16d0c57dd555641bae0b35a09b6dfa1ff40875eecd17432698b5c9962cdfd7dd096e5f297e1f28fd5baefe4941823e9c392a1b4aff599d8e765a5320c72096fe","ssdeep":"","tlshash":"b6317648455046ae712a50fde1fa008e70543d78836fdd72f13d78f92695cc86e49bcb","first_seen":"2026-01-11T01:55:53.488391Z","last_seen":"2026-01-11T02:03:05.345039Z","times_seen":2,"resource_available":false,"data":null}},"time_used":62,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":60,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-11","alert":"Sinkholed","trigger":"marulabet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"marulabet.com/icons/coinsIcons/ltc.svg","fqdn":"marulabet.com","domain":"marulabet.com","tld":"com"},"ip":{"addr":"104.21.14.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://marulabet.com/","date":"2026-01-11T02:02:20.999Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"marulabet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Dec 2025 13:13:09 GMT","end":"Mon, 30 Mar 2026 14:11:58 GMT"},"fingerprint":{"sha1":"FA:EA:E7:29:47:4D:0C:8A:97:DE:34:6B:B0:73:EC:0F:02:FE:A8:70","sha256":"70:01:CE:F8:9D:67:13:DC:31:37:03:2C:22:AB:68:81:D6:DE:0C:E8:5F:F1:92:32:46:D8:04:E1:9A:38:2E:AD"}}},"request":{"raw":"GET /icons/coinsIcons/ltc.svg HTTP/1.1\r\nHost: marulabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://marulabet.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 11 Jan 2026 02:02:21 GMT\r\ncontent-type: image/svg+xml\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pDakrjONt5loPaQ%2FlT9eIz10kPB8FsyiMsKLUc9dImQLuOUfBV1GHhzsIJtDua00NO8kUMCxm4G68FYcuFvNs606TZ1hGZShmJvh\"}]}\r\npriority: u=4,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: br\r\nlast-modified: Sat, 27 Dec 2025 17:40:04 GMT\r\netag: W/\"2a4-19b60e56419\"\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9bc0d4d9284c56ae-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":676,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"3f14c9d9a6dce25dde1948310d04f806","sha1":"b5552306e31ea0cbed86d54b4a64879358fd6e4c","sha256":"66a64a067f8ecfdb729b203c02282ba473fdd89f41024c96258406d91d642819","sha512":"8babc4be2a3eaaa07c8502e8e583c4c907029fbaa6831459b2cc215f71dc263073283ef1fc0587e35e8b867e2d2f7a16533167307868e1132fd9d8a76e733546","ssdeep":"","tlshash":"4d019e9ce707e8e89a08d3358b2530d4622a70dc971847187f9017143d64e72fc1a6d9","first_seen":"2026-01-11T01:55:53.482042Z","last_seen":"2026-02-01T16:58:56.149039Z","times_seen":3,"resource_available":false,"data":null}},"time_used":48,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":48,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-11","alert":"Sinkholed","trigger":"marulabet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"marulabet.com/icons/coinsIcons/bnb.svg","fqdn":"marulabet.com","domain":"marulabet.com","tld":"com"},"ip":{"addr":"104.21.14.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://marulabet.com/","date":"2026-01-11T02:02:21.004Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"marulabet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Dec 2025 13:13:09 GMT","end":"Mon, 30 Mar 2026 14:11:58 GMT"},"fingerprint":{"sha1":"FA:EA:E7:29:47:4D:0C:8A:97:DE:34:6B:B0:73:EC:0F:02:FE:A8:70","sha256":"70:01:CE:F8:9D:67:13:DC:31:37:03:2C:22:AB:68:81:D6:DE:0C:E8:5F:F1:92:32:46:D8:04:E1:9A:38:2E:AD"}}},"request":{"raw":"GET /icons/coinsIcons/bnb.svg HTTP/1.1\r\nHost: marulabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://marulabet.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 11 Jan 2026 02:02:21 GMT\r\ncontent-type: image/svg+xml\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=A%2BbeZdfa0GSyxWszbME5nXLkZrKSLQUrPyhBRpB%2FIH71t3j0QTd1gDCnGJU9lrV%2Bo84qwP%2F9SCJopZGIa%2F%2BYXj405Vmu6Xe5nW1R\"}]}\r\npriority: u=4,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: br\r\nlast-modified: Sat, 27 Dec 2025 17:40:04 GMT\r\netag: W/\"3a8-19b60e56441\"\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9bc0d4d9284f56ae-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":936,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"b11d2e84d1d1562dad104a600cf0b468","sha1":"2af546981d58c9056ac61638ebf8ca32c90fa38a","sha256":"4eb22bfc813908ac46c6b83f66348131d6c8927f8affeadc9df5ca133f03d5f8","sha512":"83baad577c941c5ec238e7d1a8815630ff9a0f11cf677f752c3abe83199cf7fe2585126c8b9c26236cc21b4cf6bf4f6598a050ba6241706811f2c750b8f19404","ssdeep":"","tlshash":"3b1104dcfe1b5ad7a50cd170c676a0d8022fa0f053ee83391a5917207c658b9e913380","first_seen":"2026-01-11T01:55:53.469793Z","last_seen":"2026-02-01T16:58:56.229929Z","times_seen":3,"resource_available":false,"data":null}},"time_used":65,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":64,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-11","alert":"Sinkholed","trigger":"marulabet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"marulabet.com/icons/coinsIcons/ton.svg","fqdn":"marulabet.com","domain":"marulabet.com","tld":"com"},"ip":{"addr":"104.21.14.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://marulabet.com/","date":"2026-01-11T02:02:21.009Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"marulabet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Dec 2025 13:13:09 GMT","end":"Mon, 30 Mar 2026 14:11:58 GMT"},"fingerprint":{"sha1":"FA:EA:E7:29:47:4D:0C:8A:97:DE:34:6B:B0:73:EC:0F:02:FE:A8:70","sha256":"70:01:CE:F8:9D:67:13:DC:31:37:03:2C:22:AB:68:81:D6:DE:0C:E8:5F:F1:92:32:46:D8:04:E1:9A:38:2E:AD"}}},"request":{"raw":"GET /icons/coinsIcons/ton.svg HTTP/1.1\r\nHost: marulabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://marulabet.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 11 Jan 2026 02:02:21 GMT\r\ncontent-type: image/svg+xml\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Sat, 27 Dec 2025 17:40:04 GMT\r\netag: W/\"470-19b60e56439\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qZZA3aiP7nVazVLja1a4UV6h7npcYFh3J4msOJuskf%2B7o5sGbe18ixm0eIfY3%2Bf0h4l3r7gSu2GHGmrQ1gP1MGR8HNg0%2B%2Bm04KGx\"}]}\r\ncf-ray: 9bc0d4d9385456ae-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1136,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"8e1b38e10c9f7ff80a9e2322d63cab70","sha1":"210afb4819b8ae6ac1a04760d87d08f2e947b1e6","sha256":"49a8f9d85585320928c195eaae0133e8f5a98f4766574be7395d880a81fff96b","sha512":"953ba793f2b12955656d9f4e44dfb2dfdaa662072d319bbbca885bbfd675b4a43f181a484b434bd16f6ccc3a0fff378b723e654f64b7804b00a3cb41328e5802","ssdeep":"","tlshash":"ac21aa2b43458a69b15d4324a52846c623a0d1cbf1a0dad467a7386ae9cc4f33e0c7f8","first_seen":"2025-08-22T10:32:28.837434Z","last_seen":"2026-06-10T12:47:14.44734Z","times_seen":6,"resource_available":false,"data":null}},"time_used":64,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":64,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-11","alert":"Sinkholed","trigger":"marulabet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"marulabet.com/api/track","fqdn":"marulabet.com","domain":"marulabet.com","tld":"com"},"ip":{"addr":"104.21.14.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://marulabet.com/","date":"2026-01-11T02:02:21.806Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"marulabet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Dec 2025 13:13:09 GMT","end":"Mon, 30 Mar 2026 14:11:58 GMT"},"fingerprint":{"sha1":"FA:EA:E7:29:47:4D:0C:8A:97:DE:34:6B:B0:73:EC:0F:02:FE:A8:70","sha256":"70:01:CE:F8:9D:67:13:DC:31:37:03:2C:22:AB:68:81:D6:DE:0C:E8:5F:F1:92:32:46:D8:04:E1:9A:38:2E:AD"}}},"request":{"raw":"POST /api/track HTTP/1.1\r\nHost: marulabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://marulabet.com/\r\nContent-Type: application/json\r\nopenpanel-client-id: e2820c06-249b-4bc3-9f61-fafb2c624bb1\r\nopenpanel-sdk-name: nextjs\r\nopenpanel-sdk-version: 1.1.2\r\nsentry-trace: 9ffef7b14fef40b3bd2e466e13219bb9-a4c8e844d9d98857-0\r\nbaggage: sentry-environment=production,sentry-release=web%402.7.0,sentry-public_key=6d319d1014d598ea4a0365923853ee67,sentry-trace_id=9ffef7b14fef40b3bd2e466e13219bb9,sentry-sampled=false,sentry-sample_rand=0.22013458521750728,sentry-sample_rate=0.1\r\nContent-Length: 195\r\nOrigin: https://marulabet.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":195,"data":"{\"type\":\"track\",\"payload\":{\"name\":\"screen_view\",\"properties\":{\"__referrer\":\"\",\"__path\":\"https://marulabet.com/\",\"__title\":\"Marulabet: Crypto Casino Games \u0026 Casino Slot Games - Crypto Gambling\"}}}"}},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 11 Jan 2026 02:02:21 GMT\r\ncontent-length: 0\r\naccess-control-allow-origin: *\r\nalt-svc: h3=\":443\"; ma=86400\r\nvary: Origin\r\nvia: 1.1 Caddy\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fAPeC8D%2BJh8syKMs00Ug4Nlzh%2FldHHOoJmyKFhA1gM6LCVkLO8LZcOsrFRAzOqt%2FOvthVvsndZuYtFrd0cOoBEkVD8BjHaY8GRcQ\"}]}\r\ncf-ray: 9bc0d4de586c56ae-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-05T14:03:25.26362Z","times_seen":17725631,"resource_available":true,"data":null}},"time_used":175,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":169,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-11","alert":"Sinkholed","trigger":"marulabet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"marulabet.com/_next/static/chunks/fcdabb53594fa7cf.js","fqdn":"marulabet.com","domain":"marulabet.com","tld":"com"},"ip":{"addr":"104.21.14.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://marulabet.com/","date":"2026-01-11T02:02:20.386Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"marulabet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Dec 2025 13:13:09 GMT","end":"Mon, 30 Mar 2026 14:11:58 GMT"},"fingerprint":{"sha1":"FA:EA:E7:29:47:4D:0C:8A:97:DE:34:6B:B0:73:EC:0F:02:FE:A8:70","sha256":"70:01:CE:F8:9D:67:13:DC:31:37:03:2C:22:AB:68:81:D6:DE:0C:E8:5F:F1:92:32:46:D8:04:E1:9A:38:2E:AD"}}},"request":{"raw":"GET /_next/static/chunks/fcdabb53594fa7cf.js HTTP/1.1\r\nHost: marulabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://marulabet.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 11 Jan 2026 02:02:20 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Sun, 28 Dec 2025 14:14:00 GMT\r\netag: W/\"26d97-19b654f1440\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xL7M88x3h9mL0qRBr5%2Fpd4Ot487J%2Bg6HZb%2BZ2ZVOZzK4mxG6CqIiHZCRxaFzW11L5N2r3K6uSnt6f1Hy7DmhfN8huNsMUfB29Jdi\"}]}\r\ncf-ray: 9bc0d4d4d81156ae-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":159127,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (40218)","md5":"dc35eefdfb561070a6c3fd395b8b0e06","sha1":"0e99f80f3609455f7a1d0de1e932575bc2931551","sha256":"6df913cdbb4364f61f7eb112cf23d1b40438d47fe337266bbc9c0acefa387e26","sha512":"52c394db82cb28e8d4376c834989de504542e9d324d5df43688f5c03344a4388ec7328597a3396e7cdeeaf4e9384047a52d812771be24361972c3dac98d90cbf","ssdeep":"3072:3LSLiYawBqU4ebR8+K2k5tx9FpWgJlg4P:bSKU4ebR8p5txxdJlgW","tlshash":"18f33aaa33a725334be9829ea4b51200f3365658604e043cfb7c9dd7296888b71f7f75","first_seen":"2025-12-31T07:43:06.450662Z","last_seen":"2026-04-28T01:10:54.191549Z","times_seen":185,"resource_available":true,"data":null}},"time_used":163,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":77,"receive":86,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-11","alert":"Sinkholed","trigger":"marulabet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"marulabet.com/_next/static/chunks/27b71be17762de0f.js","fqdn":"marulabet.com","domain":"marulabet.com","tld":"com"},"ip":{"addr":"104.21.14.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://marulabet.com/","date":"2026-01-11T02:02:20.374Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"marulabet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Dec 2025 13:13:09 GMT","end":"Mon, 30 Mar 2026 14:11:58 GMT"},"fingerprint":{"sha1":"FA:EA:E7:29:47:4D:0C:8A:97:DE:34:6B:B0:73:EC:0F:02:FE:A8:70","sha256":"70:01:CE:F8:9D:67:13:DC:31:37:03:2C:22:AB:68:81:D6:DE:0C:E8:5F:F1:92:32:46:D8:04:E1:9A:38:2E:AD"}}},"request":{"raw":"GET /_next/static/chunks/27b71be17762de0f.js HTTP/1.1\r\nHost: marulabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://marulabet.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 11 Jan 2026 02:02:20 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Wed, 07 Jan 2026 17:32:54 GMT\r\netag: W/\"8205-19b9984c570\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=urN82F0m7niTYgzwgzv2cjTSzTkVoD%2B0Q9JldcT1DQ4KuKir5NQj7%2FbKm5A6skLJHuSy4HeOCYIvGL1SWe%2BBm721Y4nBCQfTWgzJ\"}]}\r\ncf-ray: 9bc0d4d4c80a56ae-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":33285,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (19160)","md5":"4096c4d4d5ac98daec5aa8644d190e15","sha1":"eda20aa13991a67cfa896c2cb095ff2cc3eeb066","sha256":"a4e704b26094e68db8a6c959285508c57e758610aa915c4c8c38bf9f71801e62","sha512":"20bc9534196dd3654f1e511b2f8762774d5621779a3f51c4251e567ac2c2cef57ba58e1c7e9d2ef5c54b9babb5199ee2c0a475d1908a5869ab905bbf98ec0a13","ssdeep":"384:ojpSDGGRkRSrTfIVZ/X+C90mkdG4+Z47aYSwTgqGFJp:2S/8Z/X+C90fMzZ47a8sF","tlshash":"dde2b6b572d4faa2129341f0c43f2017f2684c7521ad7470a7e4cc9b765888da6bafd9","first_seen":"2026-01-11T01:55:53.408677Z","last_seen":"2026-04-28T01:10:54.33573Z","times_seen":184,"resource_available":true,"data":null}},"time_used":127,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":80,"receive":47,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-11","alert":"Sinkholed","trigger":"marulabet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"marulabet.com/_next/static/chunks/152fdfe24b51fb5d.js","fqdn":"marulabet.com","domain":"marulabet.com","tld":"com"},"ip":{"addr":"104.21.14.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://marulabet.com/","date":"2026-01-11T02:02:20.389Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"marulabet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Dec 2025 13:13:09 GMT","end":"Mon, 30 Mar 2026 14:11:58 GMT"},"fingerprint":{"sha1":"FA:EA:E7:29:47:4D:0C:8A:97:DE:34:6B:B0:73:EC:0F:02:FE:A8:70","sha256":"70:01:CE:F8:9D:67:13:DC:31:37:03:2C:22:AB:68:81:D6:DE:0C:E8:5F:F1:92:32:46:D8:04:E1:9A:38:2E:AD"}}},"request":{"raw":"GET /_next/static/chunks/152fdfe24b51fb5d.js HTTP/1.1\r\nHost: marulabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://marulabet.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 11 Jan 2026 02:02:20 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Sat, 27 Dec 2025 18:15:15 GMT\r\netag: W/\"78f2-19b61059738\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=grCVWdYAagwg37ogcmv%2BoykR5c%2FNdqqVpOxvrUH0M7nLw892Fw3bXJu3RI%2BRgFE71OOhgC8btsiZJj0tnPlzcCQMCTybAB523A%2B6\"}]}\r\ncf-ray: 9bc0d4d4d81356ae-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":30962,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (24690)","md5":"d886b39a00f8a660dfd06b977079a0ae","sha1":"8a940284e2e75291007237f12e2fa3f6701aece7","sha256":"87561cd8628f38e443dd262020f09d577367d5ddeaddba556f5be5aa34e16cbe","sha512":"cd52bb21b8a5a01a71578f5d532667b30b5cf59db3a3086dd1b82eabb0c688d999d61f530882ee5977aebe2fb0a5876d743eb14f10ca7c4f178bfb19714c06cb","ssdeep":"768:oNUX/V8KxiHViS2OUJBXMKyF3JClMlDGF09O1yaWa:oNc/V8y9S2O0XMK6ZCu5GW9no","tlshash":"5cd22ac53351b1255be7419ae0bf0506f0382556944d8828f3b9acfe38a1dcea677f3a","first_seen":"2026-01-11T01:55:53.459498Z","last_seen":"2026-01-11T02:03:05.354377Z","times_seen":2,"resource_available":true,"data":null}},"time_used":123,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":77,"receive":46,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-11","alert":"Sinkholed","trigger":"marulabet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"marulabet.com/ingest/v1/web/start","fqdn":"marulabet.com","domain":"marulabet.com","tld":"com"},"ip":{"addr":"104.21.14.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://marulabet.com/","date":"2026-01-11T02:02:23.378Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"marulabet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Dec 2025 13:13:09 GMT","end":"Mon, 30 Mar 2026 14:11:58 GMT"},"fingerprint":{"sha1":"FA:EA:E7:29:47:4D:0C:8A:97:DE:34:6B:B0:73:EC:0F:02:FE:A8:70","sha256":"70:01:CE:F8:9D:67:13:DC:31:37:03:2C:22:AB:68:81:D6:DE:0C:E8:5F:F1:92:32:46:D8:04:E1:9A:38:2E:AD"}}},"request":{"raw":"POST /ingest/v1/web/start HTTP/1.1\r\nHost: marulabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://marulabet.com/\r\nContent-Type: application/json\r\nsentry-trace: 9ffef7b14fef40b3bd2e466e13219bb9-b5e90ead6eea1522-0\r\nbaggage: sentry-environment=production,sentry-release=web%402.7.0,sentry-public_key=6d319d1014d598ea4a0365923853ee67,sentry-trace_id=9ffef7b14fef40b3bd2e466e13219bb9,sentry-sampled=false,sentry-sample_rand=0.22013458521750728,sentry-sample_rate=0.1\r\nContent-Length: 301\r\nOrigin: https://marulabet.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":301,"data":"{\"userUUID\":null,\"projectKey\":\"hXZI8YC5XRbnxJF59UBk\",\"revID\":\"\",\"trackerVersion\":\"17.1.0\",\"isSnippet\":false,\"timestamp\":1768096943364,\"doNotRecord\":false,\"bufferDiff\":1768096943364,\"userID\":null,\"deviceMemory\":0,\"jsHeapSizeLimit\":0,\"timezone\":\"UTC+00:00\",\"assistOnly\":false,\"width\":1280,\"height\":1024}"}},"response":{"raw":"HTTP/3 502 Bad Gateway\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\ndate: Sun, 11 Jan 2026 02:02:37 GMT\r\nx-frame-options: SAMEORIGIN\r\ncontent-length: 6394\r\npriority: u=4,i=?0\r\nserver: cloudflare\r\ncf-ray: 9bc0d4e8289a56ae-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"502","status_text":"Bad Gateway","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6394,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (396)","md5":"c9ce6cf40a6eac89785c529a72d6be9d","sha1":"82121faf168ce6494c303f7e3811f082a4b514c2","sha256":"ca654c65ee13a44ee06290be27c6786d9a4fcfb7b2170aff797e66fb7d34e5ed","sha512":"ce3ab481b7e2e3b2ff1d219d9bd26c45aeb833f6b1e0fe2e0d1642c506503e099e6dc8a8d40431c7e6e4828f236b7deef4c12435c5ee4b597ffb74bfcec0f319","ssdeep":"96:1j9jwIjYjeDK/D9KUnOG4Fh8/G4FB59424Fh+skKmtmnid7RLl7aQxP:1j9jhjYjqK/BrOehW3VMnd71l+eP","tlshash":"5ad14371b1b5127610a3c1923695fb1a79e0c253cbff44d4b3ddc6631f9ee85a903294","first_seen":"2026-01-11T02:03:05.356646Z","last_seen":"2026-01-11T02:03:05.356646Z","times_seen":1,"resource_available":false,"data":null}},"time_used":13709,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13708,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-11","alert":"Sinkholed","trigger":"marulabet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"marulabet.com/reviews?_rsc=1rhig","fqdn":"marulabet.com","domain":"marulabet.com","tld":"com"},"ip":{"addr":"104.21.14.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://marulabet.com/","date":"2026-01-11T02:02:24.328Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"marulabet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Dec 2025 13:13:09 GMT","end":"Mon, 30 Mar 2026 14:11:58 GMT"},"fingerprint":{"sha1":"FA:EA:E7:29:47:4D:0C:8A:97:DE:34:6B:B0:73:EC:0F:02:FE:A8:70","sha256":"70:01:CE:F8:9D:67:13:DC:31:37:03:2C:22:AB:68:81:D6:DE:0C:E8:5F:F1:92:32:46:D8:04:E1:9A:38:2E:AD"}}},"request":{"raw":"GET /reviews?_rsc=1rhig HTTP/1.1\r\nHost: marulabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://marulabet.com/\r\nrsc: 1\r\nnext-router-prefetch: 1\r\nnext-router-segment-prefetch: /!KHVzZXItc2lkZSk/$d$M/second-design/!KGhvbWUp/reviews/__PAGE__\r\nnext-url: /marulabet.com%26blue%26en/second-design\r\nsentry-trace: 9ffef7b14fef40b3bd2e466e13219bb9-a7a9489cfd9aff69-0\r\nbaggage: sentry-environment=production,sentry-release=web%402.7.0,sentry-public_key=6d319d1014d598ea4a0365923853ee67,sentry-trace_id=9ffef7b14fef40b3bd2e466e13219bb9,sentry-sampled=false,sentry-sample_rand=0.22013458521750728,sentry-sample_rate=0.1\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 11 Jan 2026 02:02:24 GMT\r\ncontent-type: text/x-component\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nx-nextjs-rewritten-path: /marulabet.com\u0026blue\u0026en/second-design/reviews\r\nx-middleware-rewrite: /marulabet.com\u0026blue\u0026en/second-design/reviews?_rsc=1rhig\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch, Accept-Encoding\r\nx-nextjs-cache: HIT\r\nx-nextjs-prerender: 1\r\nx-nextjs-postponed: 2\r\ncache-control: s-maxage=600, stale-while-revalidate=31535400\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GOEK4%2BiCWFpvBX%2BI3ImuNmRltSq47ydd2dOy%2FKTOtzDpOUs6TFp9mMLvVMdLqkfwzCnuWs%2BMLgkLivg0kt6geWpUyp7zGx3oDRZi\"}]}\r\ncf-ray: 9bc0d4ee18d856ae-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7394,"size_decoded":0,"mime_type":"text/x-component","magic":"ASCII text, with very long lines (1879)","md5":"b64b0af58b38a636593c4fd447f727b7","sha1":"c5012b95d0cf551b3bff0f21409f058212574064","sha256":"d374ce754703ed6a8a1bafb018daf3208edf3db8c2257165c44dab0df87f6c07","sha512":"b738932e0b6201d50095637fc10d51bd07874f2af9afd84d2450c49016dbbf0e912819f76fffa1954bb5713fe113f59e490fd12f7f47f569a7d6613d8baa69b1","ssdeep":"192:jK9tXgQHK9tXgQ+K9tXgQbDB+UeJ1EfSvFQm:jCtCsChDbk","tlshash":"a8e1b76bd80fec481c75cc0c2c2fa36392d9d873c9354de9e7acdda9028a0261f991e1","first_seen":"2026-01-11T01:55:53.458623Z","last_seen":"2026-01-11T02:03:05.358884Z","times_seen":2,"resource_available":false,"data":null}},"time_used":93,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":93,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-11","alert":"Sinkholed","trigger":"marulabet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"marulabet.com/privacy?_rsc=6cru6","fqdn":"marulabet.com","domain":"marulabet.com","tld":"com"},"ip":{"addr":"104.21.14.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://marulabet.com/","date":"2026-01-11T02:02:24.470Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"marulabet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Dec 2025 13:13:09 GMT","end":"Mon, 30 Mar 2026 14:11:58 GMT"},"fingerprint":{"sha1":"FA:EA:E7:29:47:4D:0C:8A:97:DE:34:6B:B0:73:EC:0F:02:FE:A8:70","sha256":"70:01:CE:F8:9D:67:13:DC:31:37:03:2C:22:AB:68:81:D6:DE:0C:E8:5F:F1:92:32:46:D8:04:E1:9A:38:2E:AD"}}},"request":{"raw":"GET /privacy?_rsc=6cru6 HTTP/1.1\r\nHost: marulabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://marulabet.com/\r\nrsc: 1\r\nnext-router-prefetch: 1\r\nnext-router-segment-prefetch: /!KHVzZXItc2lkZSk/$d$M/second-design/!KGhvbWUp/privacy\r\nnext-url: /marulabet.com%26blue%26en/second-design\r\nsentry-trace: 9ffef7b14fef40b3bd2e466e13219bb9-93c28de2d4c5b04b-0\r\nbaggage: sentry-environment=production,sentry-release=web%402.7.0,sentry-public_key=6d319d1014d598ea4a0365923853ee67,sentry-trace_id=9ffef7b14fef40b3bd2e466e13219bb9,sentry-sampled=false,sentry-sample_rand=0.22013458521750728,sentry-sample_rate=0.1\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 11 Jan 2026 02:02:24 GMT\r\ncontent-type: text/x-component\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nx-nextjs-rewritten-path: /marulabet.com\u0026blue\u0026en/second-design/privacy\r\nx-middleware-rewrite: /marulabet.com\u0026blue\u0026en/second-design/privacy?_rsc=6cru6\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch, Accept-Encoding\r\nx-nextjs-cache: HIT\r\nx-nextjs-prerender: 1\r\nx-nextjs-postponed: 2\r\ncache-control: s-maxage=600, stale-while-revalidate=31535400\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2FcLPYCd21HW59ZNc%2BJfpIWrbTjrsaA9zFfKsNOw%2Ba1jruBeR%2FupX8HKU%2FcK7euDbUqwS%2FnUwSz8GnxxOCh8PsfBuldOfGaEWmUP\"}]}\r\ncf-ray: 9bc0d4eef8e056ae-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":520,"size_decoded":0,"mime_type":"text/x-component","magic":"ASCII text","md5":"cae286cc5150ca9e140002b466382032","sha1":"808cbc33e587c522661c3a71f7c9a2f4593ee43c","sha256":"9349b2186e1004b44bee7c066fdd6957343d7d566c713868881e88769e334aa7","sha512":"b1c732329240455085c84a12e473d8986e5fe1abc1fcf0e71e30fe2312ae09bc31d5e4c37944b3427ae36b99e276ee07fdb591a051fc9b39959ce970274a3b7e","ssdeep":"","tlshash":"1af027a3d40dee291d3dcc8c0e5e6363855d8c7fdab12ab992acce6c068513a1b496c0","first_seen":"2026-01-11T01:55:53.415353Z","last_seen":"2026-01-11T02:03:05.218009Z","times_seen":2,"resource_available":false,"data":null}},"time_used":95,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":95,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-11","alert":"Sinkholed","trigger":"marulabet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"marulabet.com/_next/static/chunks/af839f09469b1c23.js","fqdn":"marulabet.com","domain":"marulabet.com","tld":"com"},"ip":{"addr":"104.21.14.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://marulabet.com/","date":"2026-01-11T02:02:25.049Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"marulabet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Dec 2025 13:13:09 GMT","end":"Mon, 30 Mar 2026 14:11:58 GMT"},"fingerprint":{"sha1":"FA:EA:E7:29:47:4D:0C:8A:97:DE:34:6B:B0:73:EC:0F:02:FE:A8:70","sha256":"70:01:CE:F8:9D:67:13:DC:31:37:03:2C:22:AB:68:81:D6:DE:0C:E8:5F:F1:92:32:46:D8:04:E1:9A:38:2E:AD"}}},"request":{"raw":"GET /_next/static/chunks/af839f09469b1c23.js HTTP/1.1\r\nHost: marulabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://marulabet.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 11 Jan 2026 02:02:25 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Wed, 07 Jan 2026 18:59:38 GMT\r\netag: W/\"55c6-19b99d42d90\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=aT1IgBzH4YZU7%2FSWqqHZ5vqW3GsLfQcJreRgqBYJbG29ypUgyqljyLrLAGYysDhV8ueuVT6FN5CpLnQl8VU%2Fc%2FUoNVh5LQD27wOc\"}]}\r\ncf-ray: 9bc0d4f2990756ae-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":21958,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (21601)","md5":"976cc6c3f3b537f83e480377b5cd27e2","sha1":"04192bfb234623130d4949e91782250c0f213b7b","sha256":"b278f6c07258b51fd5cb69fecd04d9b67948f5cf8831821314c150b5dda137f2","sha512":"ce7e52d6aed03315ebe9c78977a6c79fb8578cab8088f28a7ef8c94d845d615b8e48056fd89753b6fd78c5fbbb9805f90e24f3c03bd5c7c09b7ceb1111213c12","ssdeep":"192:xvDrMmBzbwNDWf8HbnWtEf5CHcI9uCwcDsF5uL3sznvbPLJ8SSpCA+hqSC:xvDQvBX6mf5acQuC9s2sLjF8SSsZqSC","tlshash":"4ea2096171426ebcf67b05a4e06dc008b23e6e1ddb4fc929b67c7c392c0a5c07a46f96","first_seen":"2026-01-11T01:55:53.462033Z","last_seen":"2026-01-11T02:03:05.360735Z","times_seen":2,"resource_available":true,"data":null}},"time_used":68,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":67,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-11","alert":"Sinkholed","trigger":"marulabet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"marulabet.com/games_new_webp/pragmatic-play-money-roll.webp","fqdn":"marulabet.com","domain":"marulabet.com","tld":"com"},"ip":{"addr":"104.21.14.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://marulabet.com/","date":"2026-01-11T02:02:33.615Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"marulabet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Dec 2025 13:13:09 GMT","end":"Mon, 30 Mar 2026 14:11:58 GMT"},"fingerprint":{"sha1":"FA:EA:E7:29:47:4D:0C:8A:97:DE:34:6B:B0:73:EC:0F:02:FE:A8:70","sha256":"70:01:CE:F8:9D:67:13:DC:31:37:03:2C:22:AB:68:81:D6:DE:0C:E8:5F:F1:92:32:46:D8:04:E1:9A:38:2E:AD"}}},"request":{"raw":"GET /games_new_webp/pragmatic-play-money-roll.webp HTTP/1.1\r\nHost: marulabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://marulabet.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 11 Jan 2026 02:02:33 GMT\r\ncontent-type: image/webp\r\ncontent-length: 47292\r\npriority: u=4,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Thu, 01 Jan 2026 18:08:08 GMT\r\netag: W/\"b8bc-19b7abedf40\"\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=IV6wwPlxLOAb%2BhWy35VYV8PFzS2pU2CAyn%2FnUnqQTcBUL07jXIxWHClebiBrpSi6%2B1ObtqMPLjxrhirta6hf7xpto30%2F%2FfWk900B\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9bc0d5281a5b56ae-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":47292,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 408x546, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"8f499a756090b04d20a8580cca1982d3","sha1":"89f052f60f70ad352a202fca1aa81d1d3a1fbe21","sha256":"d00026ca1764929dcc1301516ae96c8a340333ad9c6e78fef2052756284c1992","sha512":"aaa42f31e35f7a8a58e3e693f0ac740030e8938500f07d5b3a6a6fa60fedc277a2b974662b4db5a0575ab0a37e2129c2dbd2befcaa2746d718f46286ddbaf696","ssdeep":"768:mKIItVICBLhg128xspxShzQgWXVq3guUKKE87Nwn5U5atDZfLCd9wAZSghX8trE:6+hg1286pxSh53x98Zw5kIZfLEqK1hXw","tlshash":"9523f106ae890aa53d72f03aa24f122ca2dd60d5a6c81e71955f317713fecd79780b36","first_seen":"2026-01-11T02:03:05.362338Z","last_seen":"2026-01-11T02:03:05.362338Z","times_seen":1,"resource_available":false,"data":null}},"time_used":64,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":62,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-11","alert":"Sinkholed","trigger":"marulabet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"marulabet.com/_next/static/chunks/bfaef4f153c341cc.js","fqdn":"marulabet.com","domain":"marulabet.com","tld":"com"},"ip":{"addr":"104.21.14.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://marulabet.com/","date":"2026-01-11T02:02:20.428Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"marulabet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Dec 2025 13:13:09 GMT","end":"Mon, 30 Mar 2026 14:11:58 GMT"},"fingerprint":{"sha1":"FA:EA:E7:29:47:4D:0C:8A:97:DE:34:6B:B0:73:EC:0F:02:FE:A8:70","sha256":"70:01:CE:F8:9D:67:13:DC:31:37:03:2C:22:AB:68:81:D6:DE:0C:E8:5F:F1:92:32:46:D8:04:E1:9A:38:2E:AD"}}},"request":{"raw":"GET /_next/static/chunks/bfaef4f153c341cc.js HTTP/1.1\r\nHost: marulabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://marulabet.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 11 Jan 2026 02:02:20 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Wed, 07 Jan 2026 17:32:54 GMT\r\netag: W/\"1469-19b9984c570\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YIuQZbIxLLcL0q84vzvIirqnMQJCNc9G6GdgySNiK8vFZWzN%2FvhqDzlBrtgeSgXy9W6aAvPQcaHinc4r2O%2BcxHuGHNuzr4khPYAC\"}]}\r\ncf-ray: 9bc0d4d5182c56ae-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5225,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (4868)","md5":"700c37d6f9fb14fdde5cb280ba899bf5","sha1":"4f2b3cd20ac35c12b60981336a1f9fe85aec1318","sha256":"898dd0b934d9719b5e25558f78bdab79a32e4573340258808ef778190c14c9cf","sha512":"453efaddc08c0f06c257b3d8997a68826d877be7d7cf45ff5b334e19116462ab1ceb93b3db663ecff4f9facd13f6ff5c40bcf44021cf694fa86af40c21ccba51","ssdeep":"96:GuqtV5keo+Ejny4gF8963m1D+OZB7RM7WV0erBWAyI:HI6g89amlzzF","tlshash":"03b155e37b5832b828c911642e6ba113925c363f31cf94b49b4dc5e0d6cac98f66345f","first_seen":"2026-01-11T01:55:53.554661Z","last_seen":"2026-01-11T02:03:05.364897Z","times_seen":2,"resource_available":true,"data":null}},"time_used":76,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":72,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-11","alert":"Sinkholed","trigger":"marulabet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"marulabet.com/_next/static/chunks/a1d0cd73529eb60e.js","fqdn":"marulabet.com","domain":"marulabet.com","tld":"com"},"ip":{"addr":"104.21.14.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://marulabet.com/","date":"2026-01-11T02:02:20.464Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"marulabet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Dec 2025 13:13:09 GMT","end":"Mon, 30 Mar 2026 14:11:58 GMT"},"fingerprint":{"sha1":"FA:EA:E7:29:47:4D:0C:8A:97:DE:34:6B:B0:73:EC:0F:02:FE:A8:70","sha256":"70:01:CE:F8:9D:67:13:DC:31:37:03:2C:22:AB:68:81:D6:DE:0C:E8:5F:F1:92:32:46:D8:04:E1:9A:38:2E:AD"}}},"request":{"raw":"GET /_next/static/chunks/a1d0cd73529eb60e.js HTTP/1.1\r\nHost: marulabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://marulabet.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 11 Jan 2026 02:02:20 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Wed, 07 Jan 2026 17:32:54 GMT\r\netag: W/\"dbb0-19b9984c570\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HiUov3G52ldT1ize5V%2FzI378aRvkTf441b6sW11O3sI8BJdGwAw6hFIbv6hSWKK%2BYLfiXl0JtnUDGDaUNRZ0phrup0BmCWqWRWTu\"}]}\r\ncf-ray: 9bc0d4d5483a56ae-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":56240,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (55818)","md5":"ebcbe4a848d6d2107ae8a50eb9f5c9a1","sha1":"3b64fe31730a50d620added615817ddd6a0fda22","sha256":"ffbbc1834b1329c8ac11d3680889c04ca472c9f187dd560be5edc5a5d69d088a","sha512":"b693613d4a30a47ee9eb8132cbfe9a51312d09746ec9732d45fdf2870e2b81bf3a74ff4c1d21733ce695699f8dfeae3d71c3868541695e67a48f6c6dadf3c48d","ssdeep":"768:eyKQ7bUcGG6HzB7CBLG+jPjz1HY8URONuQQYktPP+LWsS4V8g:ew+G6HXmPn11vNunrJE","tlshash":"62431af9b15076fd512783f0a96b8259763d38b5950d41a8f3b47cfc12180be62abb83","first_seen":"2026-01-11T01:55:53.536072Z","last_seen":"2026-01-11T02:03:05.375658Z","times_seen":2,"resource_available":true,"data":null}},"time_used":92,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":70,"receive":22,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-11","alert":"Sinkholed","trigger":"marulabet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"marulabet.com/icons/coinsIcons/usdc.svg","fqdn":"marulabet.com","domain":"marulabet.com","tld":"com"},"ip":{"addr":"104.21.14.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://marulabet.com/","date":"2026-01-11T02:02:21.000Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"marulabet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Dec 2025 13:13:09 GMT","end":"Mon, 30 Mar 2026 14:11:58 GMT"},"fingerprint":{"sha1":"FA:EA:E7:29:47:4D:0C:8A:97:DE:34:6B:B0:73:EC:0F:02:FE:A8:70","sha256":"70:01:CE:F8:9D:67:13:DC:31:37:03:2C:22:AB:68:81:D6:DE:0C:E8:5F:F1:92:32:46:D8:04:E1:9A:38:2E:AD"}}},"request":{"raw":"GET /icons/coinsIcons/usdc.svg HTTP/1.1\r\nHost: marulabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://marulabet.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 11 Jan 2026 02:02:21 GMT\r\ncontent-type: image/svg+xml\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Sat, 27 Dec 2025 17:40:04 GMT\r\netag: W/\"109b-19b60e563f5\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ayMjnzdFFdYcxYOV0dg%2FHUL0O0bY8I7g8PIbqZyV6HcZod%2BltzlDODv0BX1X6adtv6dIJoXVcex%2FtCWxBJcsTT1S6O7QDT3iWYLe\"}]}\r\ncf-ray: 9bc0d4d9284d56ae-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4251,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"d508592a7e71ac3b7eeb583ddc47f35c","sha1":"f5c1111919aa3ce5ae5fccb1a46a5ea86e91d717","sha256":"a24b9bcc7f8c7665ad88b06b461709ebb411f991a5cf0711349593a6f25765cf","sha512":"fa54c4eddf1d7f6d7dcd56930eb46b6fa6db7f0a11e9bcca9033a069a5bd402f9050835c05c789cf24308a0e1c21ff55b8b855817862fdf6d8fbb402b9fd7ba7","ssdeep":"96:kdt/Yfms5Pom544wV6VL/+nUVfT0umGu/SfGGLh2p0W332iqRa:EJs5PomW4wVgXIPGu/S4332iqY","tlshash":"189174df7f650af9de4ae3e7f6a1019c250fd0b91ac19b39c7691a04f859858dc43c90","first_seen":"2026-01-11T01:55:53.508919Z","last_seen":"2026-02-01T16:58:56.243076Z","times_seen":3,"resource_available":false,"data":null}},"time_used":64,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":64,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-11","alert":"Sinkholed","trigger":"marulabet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"marulabet.com/reviews?_rsc=r54j0","fqdn":"marulabet.com","domain":"marulabet.com","tld":"com"},"ip":{"addr":"104.21.14.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://marulabet.com/","date":"2026-01-11T02:02:22.058Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"marulabet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Dec 2025 13:13:09 GMT","end":"Mon, 30 Mar 2026 14:11:58 GMT"},"fingerprint":{"sha1":"FA:EA:E7:29:47:4D:0C:8A:97:DE:34:6B:B0:73:EC:0F:02:FE:A8:70","sha256":"70:01:CE:F8:9D:67:13:DC:31:37:03:2C:22:AB:68:81:D6:DE:0C:E8:5F:F1:92:32:46:D8:04:E1:9A:38:2E:AD"}}},"request":{"raw":"GET /reviews?_rsc=r54j0 HTTP/1.1\r\nHost: marulabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://marulabet.com/\r\nrsc: 1\r\nnext-router-prefetch: 1\r\nnext-router-segment-prefetch: /_tree\r\nnext-url: /marulabet.com%26blue%26en/second-design\r\nsentry-trace: 9ffef7b14fef40b3bd2e466e13219bb9-97b7542070ad2d89-0\r\nbaggage: sentry-environment=production,sentry-release=web%402.7.0,sentry-public_key=6d319d1014d598ea4a0365923853ee67,sentry-trace_id=9ffef7b14fef40b3bd2e466e13219bb9,sentry-sampled=false,sentry-sample_rand=0.22013458521750728,sentry-sample_rate=0.1\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 11 Jan 2026 02:02:22 GMT\r\ncontent-type: text/x-component\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nx-nextjs-rewritten-path: /marulabet.com\u0026blue\u0026en/second-design/reviews\r\nx-middleware-rewrite: /marulabet.com\u0026blue\u0026en/second-design/reviews?_rsc=r54j0\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch, Accept-Encoding\r\nx-nextjs-cache: STALE\r\nx-nextjs-prerender: 1\r\nx-nextjs-postponed: 2\r\ncache-control: s-maxage=600, stale-while-revalidate=31535400\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=v1irNzzdnAdjJ18%2FofZBD4IHE%2B4YIwhhidCs3KYOXXZiNfTiBwPF%2F%2F86%2BaMHg6QuizJPNfxlZjB8HhsKaFsSRQ30%2BH1IvMV5qior\"}]}\r\ncf-ray: 9bc0d4dfe87156ae-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2459,"size_decoded":0,"mime_type":"text/x-component","magic":"ASCII text, with very long lines (950)","md5":"04cf10e91cf7d7a3f20b0a3d657002ab","sha1":"d4a346a08874ae554ccdeed1cba76ffd496d58bb","sha256":"ab050b092d6f80b9c9ae2dc66397cebc0415ad03811abe3f97aae548deadbc6a","sha512":"4ea1532a2366d0df97de286ce013dcb89e6437f89f752762e13ca14ec7c2a2d9444c32062bcf1c0e9aae86bac123ed929978f8d95ece49b92251dd18bd90a60c","ssdeep":"","tlshash":"08519e0dc8499db498c9d59961d5d7016658bf3bf1b88dace04bdc64038f03d0beab87","first_seen":"2026-01-11T02:03:05.379671Z","last_seen":"2026-01-11T02:03:05.379671Z","times_seen":1,"resource_available":false,"data":null}},"time_used":151,"timings":{"blocked":2,"dns":0,"connect":0,"send":0,"wait":148,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-11","alert":"Sinkholed","trigger":"marulabet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"marulabet.com/games_new_webp/hacksaw-cloud-princess.webp","fqdn":"marulabet.com","domain":"marulabet.com","tld":"com"},"ip":{"addr":"104.21.14.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://marulabet.com/","date":"2026-01-11T02:02:23.809Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"marulabet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Dec 2025 13:13:09 GMT","end":"Mon, 30 Mar 2026 14:11:58 GMT"},"fingerprint":{"sha1":"FA:EA:E7:29:47:4D:0C:8A:97:DE:34:6B:B0:73:EC:0F:02:FE:A8:70","sha256":"70:01:CE:F8:9D:67:13:DC:31:37:03:2C:22:AB:68:81:D6:DE:0C:E8:5F:F1:92:32:46:D8:04:E1:9A:38:2E:AD"}}},"request":{"raw":"GET /games_new_webp/hacksaw-cloud-princess.webp HTTP/1.1\r\nHost: marulabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://marulabet.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 11 Jan 2026 02:02:23 GMT\r\ncontent-type: image/webp\r\ncontent-length: 10430\r\npriority: u=4,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Thu, 01 Jan 2026 18:08:32 GMT\r\netag: W/\"28be-19b7abf3d00\"\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9CRnJ4sixxEg91Jii3ACW0MxRT0VGYIOfhXK4tZi4pP8hwAeK6QeRR6OY%2BE9tGexhUtCbJdMZ8fce0SBPzOloYQ93JUiR7dpY5qh\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9bc0d4eab8bc56ae-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10430,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 180x236, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"3c3f0bd27e20682d1b33a88a8e49bf5d","sha1":"4702f46fb155a22a4a92c361e0a625f8caafe1ef","sha256":"0830361702f350b2a902ea0a6e7e603c5b1034632bb6e0058e179456eace28c8","sha512":"d395555eed56d2a82bccb69d2e581dbc77fd5f8f6144c29801df8515b0e792b6d8562251875db172764b1c180e33635aa12d79cae1207cf6b9c91cb82f3923b4","ssdeep":"192:cQ5vZNcaWmHMAABHPC7iRNKPT6vpF5DgX2SROwDvy07mOX9RZ2XT:j9GZAABHagNKP6pF5sXbFDvy07t2XT","tlshash":"6922c0c9d15e7aa4dc686184702bcf398ff728f948a56f8de31a7f8743c815c5a644c2","first_seen":"2026-01-11T02:03:05.381945Z","last_seen":"2026-01-11T02:03:05.381945Z","times_seen":1,"resource_available":false,"data":null}},"time_used":76,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":73,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-11","alert":"Sinkholed","trigger":"marulabet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"marulabet.com/?action=register\u0026_rsc=1cqrn","fqdn":"marulabet.com","domain":"marulabet.com","tld":"com"},"ip":{"addr":"104.21.14.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://marulabet.com/","date":"2026-01-11T02:02:23.988Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"marulabet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Dec 2025 13:13:09 GMT","end":"Mon, 30 Mar 2026 14:11:58 GMT"},"fingerprint":{"sha1":"FA:EA:E7:29:47:4D:0C:8A:97:DE:34:6B:B0:73:EC:0F:02:FE:A8:70","sha256":"70:01:CE:F8:9D:67:13:DC:31:37:03:2C:22:AB:68:81:D6:DE:0C:E8:5F:F1:92:32:46:D8:04:E1:9A:38:2E:AD"}}},"request":{"raw":"GET /?action=register\u0026_rsc=1cqrn HTTP/1.1\r\nHost: marulabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://marulabet.com/\r\nrsc: 1\r\nnext-router-prefetch: 1\r\nnext-router-segment-prefetch: /_index\r\nnext-url: /marulabet.com%26blue%26en/second-design\r\nsentry-trace: 9ffef7b14fef40b3bd2e466e13219bb9-a46b60518ec45506-0\r\nbaggage: sentry-environment=production,sentry-release=web%402.7.0,sentry-public_key=6d319d1014d598ea4a0365923853ee67,sentry-trace_id=9ffef7b14fef40b3bd2e466e13219bb9,sentry-sampled=false,sentry-sample_rand=0.22013458521750728,sentry-sample_rate=0.1\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 11 Jan 2026 02:02:24 GMT\r\ncontent-type: text/x-component\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nx-nextjs-rewritten-path: /marulabet.com\u0026blue\u0026en/second-design\r\nx-nextjs-rewritten-query: action=register\r\nx-middleware-rewrite: /marulabet.com\u0026blue\u0026en/second-design?action=register\u0026_rsc=1cqrn\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch, Accept-Encoding\r\nx-nextjs-cache: HIT\r\nx-nextjs-prerender: 1\r\nx-nextjs-postponed: 2\r\ncache-control: s-maxage=600, stale-while-revalidate=31535400\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Q6%2Fpc8j1Cqc50zn0Z496jzqjJfPbyM%2FtaeQn%2BXMQ1k9DDm5jUcSyLDBuldB1dgGwJh2ftjKGK38WJe6Blu7mp7PSFgymqqs3S44S\"}]}\r\ncf-ray: 9bc0d4ebf8c756ae-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1614,"size_decoded":0,"mime_type":"text/x-component","magic":"ASCII text, with very long lines (1286)","md5":"df00cffd153cc0c6e9c361e50375c8e4","sha1":"d361ce5b545f6a33927df36db635725724d98d8f","sha256":"b35ccb22f8e798fa2c4615ad659be324ed0c9189cad10a22d599a060429309d4","sha512":"4ca23405320367721b2a5cc9e2b9646568cc74fdc5e303098869612f1d3cec9e50a5846804b604d9dad5ae380369f2125008975d904a166684e4dd65cd062048","ssdeep":"","tlshash":"58313334960cee3d7d6ac198146ff30a914d043fa3700bb8a7acee28429503e7b467c1","first_seen":"2026-01-11T01:55:53.510579Z","last_seen":"2026-01-11T02:03:05.384685Z","times_seen":2,"resource_available":false,"data":null}},"time_used":92,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":92,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-11","alert":"Sinkholed","trigger":"marulabet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"marulabet.com/privacy?_rsc=1jkk3","fqdn":"marulabet.com","domain":"marulabet.com","tld":"com"},"ip":{"addr":"104.21.14.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://marulabet.com/","date":"2026-01-11T02:02:24.373Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"marulabet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Dec 2025 13:13:09 GMT","end":"Mon, 30 Mar 2026 14:11:58 GMT"},"fingerprint":{"sha1":"FA:EA:E7:29:47:4D:0C:8A:97:DE:34:6B:B0:73:EC:0F:02:FE:A8:70","sha256":"70:01:CE:F8:9D:67:13:DC:31:37:03:2C:22:AB:68:81:D6:DE:0C:E8:5F:F1:92:32:46:D8:04:E1:9A:38:2E:AD"}}},"request":{"raw":"GET /privacy?_rsc=1jkk3 HTTP/1.1\r\nHost: marulabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://marulabet.com/\r\nrsc: 1\r\nnext-router-prefetch: 1\r\nnext-router-segment-prefetch: /_head\r\nnext-url: /marulabet.com%26blue%26en/second-design\r\nsentry-trace: 9ffef7b14fef40b3bd2e466e13219bb9-b1e133ef428d27bd-0\r\nbaggage: sentry-environment=production,sentry-release=web%402.7.0,sentry-public_key=6d319d1014d598ea4a0365923853ee67,sentry-trace_id=9ffef7b14fef40b3bd2e466e13219bb9,sentry-sampled=false,sentry-sample_rand=0.22013458521750728,sentry-sample_rate=0.1\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 11 Jan 2026 02:02:24 GMT\r\ncontent-type: text/x-component\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nx-nextjs-rewritten-path: /marulabet.com\u0026blue\u0026en/second-design/privacy\r\nx-middleware-rewrite: /marulabet.com\u0026blue\u0026en/second-design/privacy?_rsc=1jkk3\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch, Accept-Encoding\r\nx-nextjs-cache: HIT\r\nx-nextjs-prerender: 1\r\nx-nextjs-postponed: 2\r\ncache-control: s-maxage=600, stale-while-revalidate=31535400\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=k2n4c%2FOgU86qc2MEEjzm28tydpQdOll0Zbb1kRhhi8zXtjGsvHutxuPO2jHVa9jw4EyMnKknQXJqzuQGkjOYQ9lBUiCX0EYAc8WO\"}]}\r\ncf-ray: 9bc0d4ee58d956ae-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1965,"size_decoded":0,"mime_type":"text/x-component","magic":"ASCII text, with very long lines (1444)","md5":"6c421767d164700bb202c9c9dc5a75f1","sha1":"3307eee16bcd0354b14a8bc46fe024d0cfa83dc8","sha256":"1bde8df6c6a1bdd59c977fe118261690fa64a378821417905e1f73dc387b07a4","sha512":"da5bff3cd87a9f3e0299e5382e754348a6ae99f592871f64568466c98ff9a5a02dfcad92dcce2da0a0da9f42d2d0612d95ab29e1815cc95b53a6e4a04ad84467","ssdeep":"","tlshash":"f2410f7a880cec8e5a67c959086ff31a160d1677c6701e7adaaccd0e19c602e5f60f90","first_seen":"2026-01-11T02:03:05.226237Z","last_seen":"2026-01-11T02:03:05.226237Z","times_seen":1,"resource_available":false,"data":null}},"time_used":93,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":92,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-11","alert":"Sinkholed","trigger":"marulabet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"marulabet.com/providers?_rsc=1g1i1","fqdn":"marulabet.com","domain":"marulabet.com","tld":"com"},"ip":{"addr":"104.21.14.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://marulabet.com/","date":"2026-01-11T02:02:24.944Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"marulabet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Dec 2025 13:13:09 GMT","end":"Mon, 30 Mar 2026 14:11:58 GMT"},"fingerprint":{"sha1":"FA:EA:E7:29:47:4D:0C:8A:97:DE:34:6B:B0:73:EC:0F:02:FE:A8:70","sha256":"70:01:CE:F8:9D:67:13:DC:31:37:03:2C:22:AB:68:81:D6:DE:0C:E8:5F:F1:92:32:46:D8:04:E1:9A:38:2E:AD"}}},"request":{"raw":"GET /providers?_rsc=1g1i1 HTTP/1.1\r\nHost: marulabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://marulabet.com/\r\nrsc: 1\r\nnext-router-prefetch: 1\r\nnext-router-segment-prefetch: /!KHVzZXItc2lkZSk/$d$M/second-design/!KGhvbWUp/providers/__PAGE__\r\nnext-url: /marulabet.com%26blue%26en/second-design\r\nsentry-trace: 9ffef7b14fef40b3bd2e466e13219bb9-a55872ccf9e9cd99-0\r\nbaggage: sentry-environment=production,sentry-release=web%402.7.0,sentry-public_key=6d319d1014d598ea4a0365923853ee67,sentry-trace_id=9ffef7b14fef40b3bd2e466e13219bb9,sentry-sampled=false,sentry-sample_rand=0.22013458521750728,sentry-sample_rate=0.1\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 11 Jan 2026 02:02:25 GMT\r\ncontent-type: text/x-component\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nx-nextjs-rewritten-path: /marulabet.com\u0026blue\u0026en/second-design/providers\r\nx-middleware-rewrite: /marulabet.com\u0026blue\u0026en/second-design/providers?_rsc=1g1i1\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch, Accept-Encoding\r\nx-nextjs-cache: HIT\r\nx-nextjs-prerender: 1\r\nx-nextjs-postponed: 2\r\ncache-control: s-maxage=600, stale-while-revalidate=31535400\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hUJfH28G%2F6aozsv1EUdjoL%2BYtQukiNl%2BNI5T61gjkswbzvB6c7vq7vlg7U6kVGt7OV0m97o0YZwa%2FWVvDy9uUvPBZXISMzxDceEv\"}]}\r\ncf-ray: 9bc0d4f1e8ff56ae-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8850,"size_decoded":0,"mime_type":"text/x-component","magic":"ASCII text, with very long lines (2888)","md5":"8a37dfe383a4046c9c4d26b0464bcbe8","sha1":"d1338bf99b076b5d783ebf12fdaccd635173c433","sha256":"bc8f1b1936660531b2fb81f4278fcf00ff528a429ed9d1e912a119a181020569","sha512":"c76ea9ff35ae3d76e613793e998ea0bfdb781d8c023cd5eef9ad8fbecfe6bf01d2da3fb7efdebd2049b1541568934a1ad1f80cbcdcb01bb3c64752593070b222","ssdeep":"192:zK9tXIK9tX8K9tXe5Rex9ssTMynp45VCA0:zCIC8CeYsof","tlshash":"3a02df67d90fec986c66cc0c2c1f9327d6dac873c9314eace76ddca9058a4261f9a1d1","first_seen":"2026-01-11T01:55:53.511375Z","last_seen":"2026-01-11T02:03:05.386281Z","times_seen":2,"resource_available":false,"data":null}},"time_used":92,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":91,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-11","alert":"Sinkholed","trigger":"marulabet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"marulabet.com/_next/static/media/Inter_ExtraBold-s.p.331e95b9.ttf","fqdn":"marulabet.com","domain":"marulabet.com","tld":"com"},"ip":{"addr":"104.21.14.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://marulabet.com/","date":"2026-01-11T02:02:20.351Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"marulabet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Dec 2025 13:13:09 GMT","end":"Mon, 30 Mar 2026 14:11:58 GMT"},"fingerprint":{"sha1":"FA:EA:E7:29:47:4D:0C:8A:97:DE:34:6B:B0:73:EC:0F:02:FE:A8:70","sha256":"70:01:CE:F8:9D:67:13:DC:31:37:03:2C:22:AB:68:81:D6:DE:0C:E8:5F:F1:92:32:46:D8:04:E1:9A:38:2E:AD"}}},"request":{"raw":"GET /_next/static/media/Inter_ExtraBold-s.p.331e95b9.ttf HTTP/1.1\r\nHost: marulabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://marulabet.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 11 Jan 2026 02:02:20 GMT\r\ncontent-type: font/ttf\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Thu, 25 Dec 2025 14:07:50 GMT\r\netag: W/\"659e4-19b55d65af0\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=IIe6VddIqk7QvLNYPLzUwsOKrxPZZgbZHej1CQvjMXE%2BQ8EJnuGfqQbr5J33uUMBIgiRSzzfbp6PMlnHSyGDF%2BGAeJ3s7C0bgGYd\"}]}\r\ncf-ray: 9bc0d4d4bffd56ae-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":416228,"size_decoded":0,"mime_type":"font/ttf","magic":"TrueType Font data, 17 tables, 1st \"GDEF\", 39 names, Microsoft, language 0x409, Copyright 2016 The Inter Project AuthorsInter ExtraBoldRegular4.000;git-a52131595;RSMS;Inter-Ext","md5":"5061bd7701b1b3339f0c80e69a2136e4","sha1":"4a028f1fa4dbd6b4bfbfeec4a5b5e222a005b563","sha256":"3c13487b8f2eba0a78cad4cefd19272b0f4e53d61c223e6b266ddf0b332e9f1c","sha512":"65875f9f205cd70d2e1b86fbda2ac8875637e0b3e0bb37ade9da20717b0f17d2108a0cf2aa1b246affd73bea233b510d37d13193801d94e5148d3ec4159653dc","ssdeep":"6144:3VpTx/VCC2wfBsJWPziKSQVE58IqsfnHGR4tGX5/2nHTAl84RSnj3k4yhT18:3Vp+C2wfBDPziK+4suO49lfR98","tlshash":"38946b23e706db0ecd1a1d3486f5cbd037babca1792ad24bb0593a19cc931f41aa71d5","first_seen":"2025-03-15T18:38:34.528748Z","last_seen":"2026-07-30T14:11:56.974328Z","times_seen":224,"resource_available":false,"data":null}},"time_used":234,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":84,"receive":150,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-11","alert":"Sinkholed","trigger":"marulabet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"marulabet.com/_next/static/chunks/turbopack-36c5c73788eee394.js","fqdn":"marulabet.com","domain":"marulabet.com","tld":"com"},"ip":{"addr":"104.21.14.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://marulabet.com/","date":"2026-01-11T02:02:20.381Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"marulabet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Dec 2025 13:13:09 GMT","end":"Mon, 30 Mar 2026 14:11:58 GMT"},"fingerprint":{"sha1":"FA:EA:E7:29:47:4D:0C:8A:97:DE:34:6B:B0:73:EC:0F:02:FE:A8:70","sha256":"70:01:CE:F8:9D:67:13:DC:31:37:03:2C:22:AB:68:81:D6:DE:0C:E8:5F:F1:92:32:46:D8:04:E1:9A:38:2E:AD"}}},"request":{"raw":"GET /_next/static/chunks/turbopack-36c5c73788eee394.js HTTP/1.1\r\nHost: marulabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://marulabet.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 11 Jan 2026 02:02:20 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Wed, 07 Jan 2026 17:32:55 GMT\r\netag: W/\"29b8-19b9984c958\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TE2bm8blo%2FGCguowf5Yf7TfXza3zYYZstqdiWr6dbs2G0i%2Bt0rd34RjKdjFdAeWN%2FqIzBdhj0mXzPVTcGml9WOKi9VxdVeXvfV9t\"}]}\r\ncf-ray: 9bc0d4d4d80f56ae-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10680,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (6484)","md5":"ef4d69aa84e06f8fbc9c8db0e510543c","sha1":"65333b2bbba2b2366099f5d936f0f45329184724","sha256":"fbb9244bc2c973e3ac5b4f384c1105f6235ba647a8bfaba18d8107c201f7b847","sha512":"d1db5f46e2f4e07947bd50f3dc30b1753f1030586860e345db556bfa7c966527e7cec9b3275cbb3398a189ff8f6e0103149670ca20fa120406e0609a4153f54e","ssdeep":"192:wyWTzl08YEsUnU91E4dn2Npl/daXMh6rW9xocxkUk1Msg:NWTzvy0bl/A1aroQF","tlshash":"3f22d6da33a6f077436fa1ea807f0041f17944b9145d582893aca8fa38354ae49e7f67","first_seen":"2026-01-11T01:55:53.447257Z","last_seen":"2026-01-11T02:03:05.389983Z","times_seen":2,"resource_available":false,"data":null}},"time_used":107,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":77,"receive":30,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-11","alert":"Sinkholed","trigger":"marulabet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"marulabet.com/_next/static/chunks/e1c6971655194e10.js","fqdn":"marulabet.com","domain":"marulabet.com","tld":"com"},"ip":{"addr":"104.21.14.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://marulabet.com/","date":"2026-01-11T02:02:20.417Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"marulabet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Dec 2025 13:13:09 GMT","end":"Mon, 30 Mar 2026 14:11:58 GMT"},"fingerprint":{"sha1":"FA:EA:E7:29:47:4D:0C:8A:97:DE:34:6B:B0:73:EC:0F:02:FE:A8:70","sha256":"70:01:CE:F8:9D:67:13:DC:31:37:03:2C:22:AB:68:81:D6:DE:0C:E8:5F:F1:92:32:46:D8:04:E1:9A:38:2E:AD"}}},"request":{"raw":"GET /_next/static/chunks/e1c6971655194e10.js HTTP/1.1\r\nHost: marulabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://marulabet.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 11 Jan 2026 02:02:20 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Sat, 03 Jan 2026 18:08:43 GMT\r\netag: W/\"7ee3-19b850c1ff8\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RPxg%2Brm1urlCmE6nbc9Iyjtn0wQ1ULAiosJ1kNwPc11Y2yr6O4cUl3LAXrBcTe%2FYi9LKu2r%2BP%2FHb%2B7KwNsv6lpnZiWWvMKpXKpN%2B\"}]}\r\ncf-ray: 9bc0d4d4f82656ae-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":32483,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (32126)","md5":"6c23170c9ca2c6ad490ae738833d4771","sha1":"353e9c7503ce723e841994f740f7514d642ed21c","sha256":"2baf41044b6ae964e9ee751f3905775943be60770a44546a4d079919322e8128","sha512":"0fa4d79c037e8845c6c74b2a8db0b649d748f69f52c69fbdc10d750361551f3f41d7ec6f4decfe47a5554c2b30d6fa9bf603703c5c77797f80d85f5649b7e2fc","ssdeep":"768:jouEv/zy1gk+eUNXbkX+4BNtr3kJMlZE3BkefskEJ5s+:cuqu1gk+eUVkX+W3wCZENfskEJ7","tlshash":"30e2a5e63602ba73e3dd01da10b74455e37e255e2009402cf97d5cae3a78949c0ebb7b","first_seen":"2026-01-11T01:55:53.472858Z","last_seen":"2026-02-19T17:02:28.738095Z","times_seen":6,"resource_available":true,"data":null}},"time_used":107,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":74,"receive":33,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-11","alert":"Sinkholed","trigger":"marulabet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"marulabet.com/_next/static/chunks/721e01f83824f1fe.js","fqdn":"marulabet.com","domain":"marulabet.com","tld":"com"},"ip":{"addr":"104.21.14.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://marulabet.com/","date":"2026-01-11T02:02:20.440Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"marulabet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Dec 2025 13:13:09 GMT","end":"Mon, 30 Mar 2026 14:11:58 GMT"},"fingerprint":{"sha1":"FA:EA:E7:29:47:4D:0C:8A:97:DE:34:6B:B0:73:EC:0F:02:FE:A8:70","sha256":"70:01:CE:F8:9D:67:13:DC:31:37:03:2C:22:AB:68:81:D6:DE:0C:E8:5F:F1:92:32:46:D8:04:E1:9A:38:2E:AD"}}},"request":{"raw":"GET /_next/static/chunks/721e01f83824f1fe.js HTTP/1.1\r\nHost: marulabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://marulabet.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 11 Jan 2026 02:02:20 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Sat, 27 Dec 2025 18:15:15 GMT\r\netag: W/\"2303-19b61059738\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=UYXiaQfNqC2LiHNO2zOZ2WVhUIn5BVx%2FCKNyQXzZnc%2Fb7bjQpvNkMpC1o%2FVFqK1%2F4Z5CzVIzJW2YXxhRFZhWVXlZTueV3UlsceTY\"}]}\r\ncf-ray: 9bc0d4d5283356ae-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8963,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (8606)","md5":"6bc4875608d1581d69ed7ceb959bce2c","sha1":"11fdf64c66ca9b6b033e2d61ef2442a40eaa47c4","sha256":"a117fd1ccc9aa829e9b0687fb37e8be01734c85d8507f26da4bb0da74112095d","sha512":"e4493d78fb7dae610ed008c664376af1ebbc440ff8fb58bd99e71e0b495a6666ecbb74f7881084852990a861e144a2dc1656481dd426a6c10a56be70119a2f73","ssdeep":"192:Qw1iej07+fHYtNgVC8SLnm4tpX5WISYxU:Qmiej07Uyh8STm+9e","tlshash":"f4025424e6ac123c68d202e49527402327dd817f739b517ac99e86b0b68787cd793ceb","first_seen":"2025-12-31T07:43:06.436688Z","last_seen":"2026-01-11T02:03:05.392989Z","times_seen":3,"resource_available":true,"data":null}},"time_used":80,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":72,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-11","alert":"Sinkholed","trigger":"marulabet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"marulabet.com/flags/US.webp","fqdn":"marulabet.com","domain":"marulabet.com","tld":"com"},"ip":{"addr":"104.21.14.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://marulabet.com/","date":"2026-01-11T02:02:21.013Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"marulabet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Dec 2025 13:13:09 GMT","end":"Mon, 30 Mar 2026 14:11:58 GMT"},"fingerprint":{"sha1":"FA:EA:E7:29:47:4D:0C:8A:97:DE:34:6B:B0:73:EC:0F:02:FE:A8:70","sha256":"70:01:CE:F8:9D:67:13:DC:31:37:03:2C:22:AB:68:81:D6:DE:0C:E8:5F:F1:92:32:46:D8:04:E1:9A:38:2E:AD"}}},"request":{"raw":"GET /flags/US.webp HTTP/1.1\r\nHost: marulabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://marulabet.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 11 Jan 2026 02:02:21 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1728\r\npriority: u=4,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Thu, 01 Jan 2026 20:56:37 GMT\r\netag: W/\"6c0-19b7b591f88\"\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Qzbu8qzk2d13l%2Frv7ARFQ0CxKv5NyWl8OXfod2lozUk5h3ZvqbZga5FBUqrAGZdF4DFIagynitbhnvZaIiLA%2FHRfmlAcw%2FOtSLCs\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9bc0d4d9385656ae-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1728,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"d5b2ad4da5657d21695de35554777081","sha1":"1cdc99c99f67962995af22fc9c811f94b72d53ac","sha256":"e3a1cbe55c01edaea1f1715a1593ff2a0685067bc0c5d77aeca7f27fe3a630b4","sha512":"c69e0989ba173bf00495affc2ee10a77cd8a5dd8a05426985c0db982ce8cdc22f376449fd57f97966526fbd4ca0332be02decdf91a0f8e4436cace537a20e39d","ssdeep":"","tlshash":"653128758f3056cae7dc0d60343094e0a3efeddc8b280e293088fe0364f1626785aa60","first_seen":"2026-01-11T01:55:53.490895Z","last_seen":"2026-08-04T16:44:03.31302Z","times_seen":103,"resource_available":false,"data":null}},"time_used":69,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":69,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-11","alert":"Sinkholed","trigger":"marulabet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"marulabet.com/second-design/ranks/gold1.webp","fqdn":"marulabet.com","domain":"marulabet.com","tld":"com"},"ip":{"addr":"104.21.14.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://marulabet.com/","date":"2026-01-11T02:02:23.747Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"marulabet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Dec 2025 13:13:09 GMT","end":"Mon, 30 Mar 2026 14:11:58 GMT"},"fingerprint":{"sha1":"FA:EA:E7:29:47:4D:0C:8A:97:DE:34:6B:B0:73:EC:0F:02:FE:A8:70","sha256":"70:01:CE:F8:9D:67:13:DC:31:37:03:2C:22:AB:68:81:D6:DE:0C:E8:5F:F1:92:32:46:D8:04:E1:9A:38:2E:AD"}}},"request":{"raw":"GET /second-design/ranks/gold1.webp HTTP/1.1\r\nHost: marulabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://marulabet.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 11 Jan 2026 02:02:23 GMT\r\ncontent-type: image/webp\r\ncontent-length: 4380\r\npriority: u=4,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Sat, 27 Dec 2025 17:40:05 GMT\r\netag: W/\"111c-19b60e56679\"\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WkTD0ELWOMHtu4zw4qO%2F4NhVIoa%2FFEv8N7iAsbcARJ6aj1K%2BbXRudbbkdhg9aXprwT3YanadcP%2ByEQcrtLbOQBjry1xmlUguqDLP\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9bc0d4ea58a556ae-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4380,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"4871a0b3d8917103a4065168871efb6c","sha1":"24979179b5552f93960f58bdf2424126cf9264e9","sha256":"99ead3aaa178bb7a6a47fa72360d63eeef7e6c696ada3723c46eb037af123cd0","sha512":"99942d13d1d4bf95aba55f11b993180c8e0524a4e4542ab22a2908b081374686bf64168b425cf250024e941d6153066564de6a3e95fe08533bb16594fb36cc99","ssdeep":"96:h6xb8++AODzmab0uDAdundO09zFsgeoQHFzE+4Lpls/:4xb8++JDzrb5LdOaFJe/Ovpls/","tlshash":"57917d259ce887d965dc09c9fb4af177269269ddcb27274dcea0b913412a002c3ad6e2","first_seen":"2026-01-11T01:55:53.57397Z","last_seen":"2026-02-19T17:02:28.746334Z","times_seen":34,"resource_available":false,"data":null}},"time_used":71,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":71,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-11","alert":"Sinkholed","trigger":"marulabet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"marulabet.com/games_new_webp/pragmatic-play-the-money-men-megaways.webp","fqdn":"marulabet.com","domain":"marulabet.com","tld":"com"},"ip":{"addr":"104.21.14.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://marulabet.com/","date":"2026-01-11T02:02:23.770Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"marulabet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Dec 2025 13:13:09 GMT","end":"Mon, 30 Mar 2026 14:11:58 GMT"},"fingerprint":{"sha1":"FA:EA:E7:29:47:4D:0C:8A:97:DE:34:6B:B0:73:EC:0F:02:FE:A8:70","sha256":"70:01:CE:F8:9D:67:13:DC:31:37:03:2C:22:AB:68:81:D6:DE:0C:E8:5F:F1:92:32:46:D8:04:E1:9A:38:2E:AD"}}},"request":{"raw":"GET /games_new_webp/pragmatic-play-the-money-men-megaways.webp HTTP/1.1\r\nHost: marulabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://marulabet.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 11 Jan 2026 02:02:23 GMT\r\ncontent-type: image/webp\r\ncontent-length: 35700\r\npriority: u=4,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Thu, 01 Jan 2026 18:08:37 GMT\r\netag: W/\"8b74-19b7abf5088\"\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xV3cYlAhXhqE7j6EBOOlKVXvdssv8U3gs0O%2FZET%2FH0CrU%2B1%2BaBf7v9OCgp4eFqQlQQmbZxelQ0NCzzcEqdiy5GOHVKHXkj2mR6bF\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9bc0d4ea78ab56ae-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":35700,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 408x546, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"79695413ff109ba1ba45607bd9b1a43d","sha1":"5bee35c9a5a18bfdba6ea0afa017dfe14cf06e64","sha256":"f835a0f46b9485382b14e8e8d42487eb54a50ec27e27d1cc722764f1c39f8c2a","sha512":"a74f0246d68872ba5ae18869225a8a57a066e1f0c93893f77c2e130dc2c33f30921ea662aa8474978140b89915bde678001b1a932b46f9d8691a17f6ee509e94","ssdeep":"768:4jHBrZ/dr91MWPs6w2hm6Kt2O9w1aMIVDn/U+bqrGbmK29lrK:4R9SWJwR2p1FCnq+mKwlrK","tlshash":"bff2f12aec165ec8c3059ed8640428707a3d97e5a3eb354ba16375c45c2daaf4ecdee0","first_seen":"2026-01-11T02:03:05.395653Z","last_seen":"2026-01-11T02:03:05.395653Z","times_seen":1,"resource_available":false,"data":null}},"time_used":83,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":59,"receive":24,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-11","alert":"Sinkholed","trigger":"marulabet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"marulabet.com/blog?_rsc=w1gzb","fqdn":"marulabet.com","domain":"marulabet.com","tld":"com"},"ip":{"addr":"104.21.14.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://marulabet.com/","date":"2026-01-11T02:02:24.640Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"marulabet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Dec 2025 13:13:09 GMT","end":"Mon, 30 Mar 2026 14:11:58 GMT"},"fingerprint":{"sha1":"FA:EA:E7:29:47:4D:0C:8A:97:DE:34:6B:B0:73:EC:0F:02:FE:A8:70","sha256":"70:01:CE:F8:9D:67:13:DC:31:37:03:2C:22:AB:68:81:D6:DE:0C:E8:5F:F1:92:32:46:D8:04:E1:9A:38:2E:AD"}}},"request":{"raw":"GET /blog?_rsc=w1gzb HTTP/1.1\r\nHost: marulabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://marulabet.com/\r\nrsc: 1\r\nnext-router-prefetch: 1\r\nnext-router-segment-prefetch: /!KHVzZXItc2lkZSk/$d$M/second-design/!KGhvbWUp/blog\r\nnext-url: /marulabet.com%26blue%26en/second-design\r\nsentry-trace: 9ffef7b14fef40b3bd2e466e13219bb9-bdf6a20dd03e8268-0\r\nbaggage: sentry-environment=production,sentry-release=web%402.7.0,sentry-public_key=6d319d1014d598ea4a0365923853ee67,sentry-trace_id=9ffef7b14fef40b3bd2e466e13219bb9,sentry-sampled=false,sentry-sample_rand=0.22013458521750728,sentry-sample_rate=0.1\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 11 Jan 2026 02:02:24 GMT\r\ncontent-type: text/x-component\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nx-nextjs-rewritten-path: /marulabet.com\u0026blue\u0026en/second-design/blog\r\nx-middleware-rewrite: /marulabet.com\u0026blue\u0026en/second-design/blog?_rsc=w1gzb\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch, Accept-Encoding\r\nx-nextjs-cache: HIT\r\nx-nextjs-prerender: 1\r\nx-nextjs-postponed: 2\r\ncache-control: s-maxage=600, stale-while-revalidate=31535400\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fYtFM0ogwLrEXz0ZhVJAe78nSpiZqSSs2MImLS3f1F2euF6a6ssJHaic%2B7p7TN8P74Xzvf%2FRC6MGHXjL2UNhqn90qudQBJy9PIvu\"}]}\r\ncf-ray: 9bc0d4f008ef56ae-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":520,"size_decoded":0,"mime_type":"text/x-component","magic":"ASCII text","md5":"cae286cc5150ca9e140002b466382032","sha1":"808cbc33e587c522661c3a71f7c9a2f4593ee43c","sha256":"9349b2186e1004b44bee7c066fdd6957343d7d566c713868881e88769e334aa7","sha512":"b1c732329240455085c84a12e473d8986e5fe1abc1fcf0e71e30fe2312ae09bc31d5e4c37944b3427ae36b99e276ee07fdb591a051fc9b39959ce970274a3b7e","ssdeep":"","tlshash":"1af027a3d40dee291d3dcc8c0e5e6363855d8c7fdab12ab992acce6c068513a1b496c0","first_seen":"2026-01-11T01:55:53.415353Z","last_seen":"2026-01-11T02:03:05.218009Z","times_seen":2,"resource_available":false,"data":null}},"time_used":91,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":91,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-11","alert":"Sinkholed","trigger":"marulabet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"marulabet.com/api/2/envelope/?sentry_version=7\u0026sentry_key=6d319d1014d598ea4a0365923853ee67\u0026sentry_client=sentry.javascript.nextjs%2F10.30.0","fqdn":"marulabet.com","domain":"marulabet.com","tld":"com"},"ip":{"addr":"104.21.14.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://marulabet.com/","date":"2026-01-11T02:02:21.015Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"marulabet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Dec 2025 13:13:09 GMT","end":"Mon, 30 Mar 2026 14:11:58 GMT"},"fingerprint":{"sha1":"FA:EA:E7:29:47:4D:0C:8A:97:DE:34:6B:B0:73:EC:0F:02:FE:A8:70","sha256":"70:01:CE:F8:9D:67:13:DC:31:37:03:2C:22:AB:68:81:D6:DE:0C:E8:5F:F1:92:32:46:D8:04:E1:9A:38:2E:AD"}}},"request":{"raw":"POST /api/2/envelope/?sentry_version=7\u0026sentry_key=6d319d1014d598ea4a0365923853ee67\u0026sentry_client=sentry.javascript.nextjs%2F10.30.0 HTTP/1.1\r\nHost: marulabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://marulabet.com/\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 454\r\nOrigin: https://marulabet.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":454,"data":"{\"sent_at\":\"2026-01-11T02:02:20.953Z\",\"sdk\":{\"name\":\"sentry.javascript.nextjs\",\"version\":\"10.30.0\"}}\n{\"type\":\"session\"}\n{\"sid\":\"dcba3f7043884adaaf7103cf7a639ed7\",\"init\":true,\"started\":\"2026-01-11T02:02:20.952Z\",\"timestamp\":\"2026-01-11T02:02:20.952Z\",\"status\":\"ok\",\"errors\":0,\"attrs\":{\"release\":\"web@2.7.0\",\"environment\":\"production\",\"ip_address\":\"{{auto}}\",\"user_agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\"}}"}},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 11 Jan 2026 02:02:21 GMT\r\ncontent-type: application/json\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7ZcL5ejfhffUbNnYgTYsfvnLWhHuGjqxUe9JxhIsBibZ9lxa11TGBgqj0mHPrKltgcHc4ohq%2B1w8K0YL6xFybHOGWTtotShB%2F31e\"}]}\r\npriority: u=4,i=?0\r\nvary: origin, access-control-request-method, access-control-request-headers\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: x-sentry-error,x-sentry-rate-limits,retry-after\r\ncross-origin-resource-policy: cross-origin\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9bc0d4d9485756ae-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"99914b932bd37a50b983c5e7c90ae93b","sha1":"bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f","sha256":"44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a","sha512":"27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd","ssdeep":"","tlshash":"c7100000000000c00000000c00000000000000000c0000000000000000000000000000","first_seen":"2023-03-07T01:15:26Z","last_seen":"2026-08-05T14:01:03.207789Z","times_seen":755322,"resource_available":true,"data":null}},"time_used":86,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":86,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-11","alert":"Sinkholed","trigger":"marulabet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"marulabet.com/account?_rsc=r54j0","fqdn":"marulabet.com","domain":"marulabet.com","tld":"com"},"ip":{"addr":"104.21.14.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://marulabet.com/","date":"2026-01-11T02:02:23.375Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"marulabet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Dec 2025 13:13:09 GMT","end":"Mon, 30 Mar 2026 14:11:58 GMT"},"fingerprint":{"sha1":"FA:EA:E7:29:47:4D:0C:8A:97:DE:34:6B:B0:73:EC:0F:02:FE:A8:70","sha256":"70:01:CE:F8:9D:67:13:DC:31:37:03:2C:22:AB:68:81:D6:DE:0C:E8:5F:F1:92:32:46:D8:04:E1:9A:38:2E:AD"}}},"request":{"raw":"GET /account?_rsc=r54j0 HTTP/1.1\r\nHost: marulabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://marulabet.com/\r\nrsc: 1\r\nnext-router-prefetch: 1\r\nnext-router-segment-prefetch: /_tree\r\nnext-url: /marulabet.com%26blue%26en/second-design\r\nsentry-trace: 9ffef7b14fef40b3bd2e466e13219bb9-98e2028fe4bf77a2-0\r\nbaggage: sentry-environment=production,sentry-release=web%402.7.0,sentry-public_key=6d319d1014d598ea4a0365923853ee67,sentry-trace_id=9ffef7b14fef40b3bd2e466e13219bb9,sentry-sampled=false,sentry-sample_rand=0.22013458521750728,sentry-sample_rate=0.1\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 307 Temporary Redirect\r\nserver: cloudflare\r\ndate: Sun, 11 Jan 2026 02:02:23 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nlocation: /?action=register\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=riltA1JjzjijR9od4Iyao5T65Z4NYuHDHm%2BgwKZdDItwskbDYtJBnAmqXjU7PdrFIdBL%2F9fzKdpwt0b6FIQk1V7eLuWEpty65gs3\"}]}\r\ncf-ray: 9bc0d4e8189956ae-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"307","status_text":"Temporary Redirect","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2333,"size_decoded":0,"mime_type":"text/x-component","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-05T14:03:25.26362Z","times_seen":17725631,"resource_available":true,"data":null}},"time_used":89,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":89,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-11","alert":"Sinkholed","trigger":"marulabet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"marulabet.com/group/shows?_rsc=1ss1o","fqdn":"marulabet.com","domain":"marulabet.com","tld":"com"},"ip":{"addr":"104.21.14.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://marulabet.com/","date":"2026-01-11T02:02:25.182Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"marulabet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Dec 2025 13:13:09 GMT","end":"Mon, 30 Mar 2026 14:11:58 GMT"},"fingerprint":{"sha1":"FA:EA:E7:29:47:4D:0C:8A:97:DE:34:6B:B0:73:EC:0F:02:FE:A8:70","sha256":"70:01:CE:F8:9D:67:13:DC:31:37:03:2C:22:AB:68:81:D6:DE:0C:E8:5F:F1:92:32:46:D8:04:E1:9A:38:2E:AD"}}},"request":{"raw":"GET /group/shows?_rsc=1ss1o HTTP/1.1\r\nHost: marulabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://marulabet.com/\r\nrsc: 1\r\nnext-router-prefetch: 1\r\nnext-router-segment-prefetch: /!KHVzZXItc2lkZSk/$d$M/second-design/!KGhvbWUp/group/$d$group/__PAGE__\r\nnext-url: /marulabet.com%26blue%26en/second-design\r\nsentry-trace: 9ffef7b14fef40b3bd2e466e13219bb9-b0d4c264cb7785a0-0\r\nbaggage: sentry-environment=production,sentry-release=web%402.7.0,sentry-public_key=6d319d1014d598ea4a0365923853ee67,sentry-trace_id=9ffef7b14fef40b3bd2e466e13219bb9,sentry-sampled=false,sentry-sample_rand=0.22013458521750728,sentry-sample_rate=0.1\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 11 Jan 2026 02:02:25 GMT\r\ncontent-type: text/x-component\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nx-nextjs-rewritten-path: /marulabet.com\u0026blue\u0026en/second-design/group/shows\r\nx-middleware-rewrite: /marulabet.com\u0026blue\u0026en/second-design/group/shows?_rsc=1ss1o\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch, Accept-Encoding\r\nx-nextjs-cache: HIT\r\nx-nextjs-prerender: 1\r\nx-nextjs-postponed: 2\r\ncache-control: s-maxage=600, stale-while-revalidate=31535400\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Q6%2FDp0btt16S%2Bs%2FXDv%2Bgn45vEdsXr5q2BM%2B7Wnod1O4b9EowAqFU6sA6IazPISpnxxGPrRty0fo2oleeLRzcDNWkYwVRyjdjjKBs\"}]}\r\ncf-ray: 9bc0d4f3690d56ae-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8571,"size_decoded":0,"mime_type":"text/x-component","magic":"ASCII text, with very long lines (6295)","md5":"ed2773589d6f0632df41114a7fb257fe","sha1":"9f9cf34bccabe983213a7fccff707de90d4e3ec6","sha256":"9b36936826afd5917992f5df7b3ab7e1a3234805f9885fd110175f638e50931d","sha512":"c60274ac98e6b4e872c21f4b796acf88842f9941b20a5628ed2aac99235c6123158edf6fc4eb525e89c019313076671c1094e7c56c489fc99228439e009ed3a2","ssdeep":"96:W8K9tXeyge+Qi6GTWTQaYY+FV1HAuqk7aaUjHIti3QJv:W8K9tXzg50GTWTQaYZV1HJB7aXzMCQJv","tlshash":"2c0237bac446dc944a1e9f0814cb2e0ef0ac2d3364d81ca8b91dee7cd55dc579b0b193","first_seen":"2026-01-11T01:55:53.517284Z","last_seen":"2026-01-11T02:03:05.397429Z","times_seen":2,"resource_available":false,"data":null}},"time_used":94,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":93,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-11","alert":"Sinkholed","trigger":"marulabet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"marulabet.com/group/slots?_rsc=1gi4n","fqdn":"marulabet.com","domain":"marulabet.com","tld":"com"},"ip":{"addr":"104.21.14.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://marulabet.com/","date":"2026-01-11T02:02:25.313Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"marulabet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Dec 2025 13:13:09 GMT","end":"Mon, 30 Mar 2026 14:11:58 GMT"},"fingerprint":{"sha1":"FA:EA:E7:29:47:4D:0C:8A:97:DE:34:6B:B0:73:EC:0F:02:FE:A8:70","sha256":"70:01:CE:F8:9D:67:13:DC:31:37:03:2C:22:AB:68:81:D6:DE:0C:E8:5F:F1:92:32:46:D8:04:E1:9A:38:2E:AD"}}},"request":{"raw":"GET /group/slots?_rsc=1gi4n HTTP/1.1\r\nHost: marulabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://marulabet.com/\r\nrsc: 1\r\nnext-router-prefetch: 1\r\nnext-router-segment-prefetch: /!KHVzZXItc2lkZSk/$d$M/second-design/!KGhvbWUp/group/$d$group\r\nnext-url: /marulabet.com%26blue%26en/second-design\r\nsentry-trace: 9ffef7b14fef40b3bd2e466e13219bb9-b9f7e22ed3f2680c-0\r\nbaggage: sentry-environment=production,sentry-release=web%402.7.0,sentry-public_key=6d319d1014d598ea4a0365923853ee67,sentry-trace_id=9ffef7b14fef40b3bd2e466e13219bb9,sentry-sampled=false,sentry-sample_rand=0.22013458521750728,sentry-sample_rate=0.1\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 11 Jan 2026 02:02:25 GMT\r\ncontent-type: text/x-component\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nx-nextjs-rewritten-path: /marulabet.com\u0026blue\u0026en/second-design/group/slots\r\nx-middleware-rewrite: /marulabet.com\u0026blue\u0026en/second-design/group/slots?_rsc=1gi4n\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch, Accept-Encoding\r\nx-nextjs-cache: HIT\r\nx-nextjs-prerender: 1\r\nx-nextjs-postponed: 2\r\ncache-control: s-maxage=600, stale-while-revalidate=31535400\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gKj2Etnyu4Tq4UBgW%2Br0m4bPZYshkhP%2BfLL4J5U70iVFF0rwuvBzu9gXK96LODNYQ2qaKiySbvLkgTuOzB8JxrBRVohbQWqrmR0S\"}]}\r\ncf-ray: 9bc0d4f4391d56ae-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":520,"size_decoded":0,"mime_type":"text/x-component","magic":"ASCII text","md5":"cae286cc5150ca9e140002b466382032","sha1":"808cbc33e587c522661c3a71f7c9a2f4593ee43c","sha256":"9349b2186e1004b44bee7c066fdd6957343d7d566c713868881e88769e334aa7","sha512":"b1c732329240455085c84a12e473d8986e5fe1abc1fcf0e71e30fe2312ae09bc31d5e4c37944b3427ae36b99e276ee07fdb591a051fc9b39959ce970274a3b7e","ssdeep":"","tlshash":"1af027a3d40dee291d3dcc8c0e5e6363855d8c7fdab12ab992acce6c068513a1b496c0","first_seen":"2026-01-11T01:55:53.415353Z","last_seen":"2026-01-11T02:03:05.218009Z","times_seen":2,"resource_available":false,"data":null}},"time_used":90,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":90,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-11","alert":"Sinkholed","trigger":"marulabet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"marulabet.com/_next/static/chunks/9c439f77bcf7138d.js","fqdn":"marulabet.com","domain":"marulabet.com","tld":"com"},"ip":{"addr":"104.21.14.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://marulabet.com/","date":"2026-01-11T02:02:20.408Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"marulabet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Dec 2025 13:13:09 GMT","end":"Mon, 30 Mar 2026 14:11:58 GMT"},"fingerprint":{"sha1":"FA:EA:E7:29:47:4D:0C:8A:97:DE:34:6B:B0:73:EC:0F:02:FE:A8:70","sha256":"70:01:CE:F8:9D:67:13:DC:31:37:03:2C:22:AB:68:81:D6:DE:0C:E8:5F:F1:92:32:46:D8:04:E1:9A:38:2E:AD"}}},"request":{"raw":"GET /_next/static/chunks/9c439f77bcf7138d.js HTTP/1.1\r\nHost: marulabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://marulabet.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 11 Jan 2026 02:02:20 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Sat, 27 Dec 2025 18:15:15 GMT\r\netag: W/\"ae89-19b61059738\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cmefNnaxOTIsEjM%2F6VydZuA09tow1WQ3cmlYNNUjfPEHeaW1ICiLMXQXn6sa7DN583FDKNce20anTFMtagBRQDBRS5ld7kZSK%2FyF\"}]}\r\ncf-ray: 9bc0d4d4f81f56ae-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":44681,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (44324)","md5":"84c3a7bfbd13e6eed8ef2600eaddebdc","sha1":"492c5eb4c2b6ea7d50aa47251107d02af9a99efa","sha256":"c010c5927a47a70ff2fba12a2c2fc224103a5ba1db45bff25a3c4ff53a7ed2db","sha512":"ba4d7713a6c6d0abc5f738d03df05c512d350afb9d0fca1ab43758499c61f0a263f9cc412611e7d64cbbb82481b03ea62829c5cd8719234fa3f46bac724dabcf","ssdeep":"768:B7Tl+Bi1HaSiLD3XirHJdPYKENWNDRYEpEzf9MSnS61ls0c2kXBdnXDnI8qhxCYb:B9+McSiLD3XiWIDRY0EfUH1XMOYb","tlshash":"2c13d8da73607251a3cb515cc4af0b81733758ec2019807c3a7da9cb69b0a5976bf73a","first_seen":"2026-01-11T01:55:53.441745Z","last_seen":"2026-02-19T17:02:28.745023Z","times_seen":73,"resource_available":true,"data":null}},"time_used":121,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":79,"receive":42,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-11","alert":"Sinkholed","trigger":"marulabet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"marulabet.com/second-design/logo_blue.svg","fqdn":"marulabet.com","domain":"marulabet.com","tld":"com"},"ip":{"addr":"104.21.14.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://marulabet.com/","date":"2026-01-11T02:02:20.993Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"marulabet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Dec 2025 13:13:09 GMT","end":"Mon, 30 Mar 2026 14:11:58 GMT"},"fingerprint":{"sha1":"FA:EA:E7:29:47:4D:0C:8A:97:DE:34:6B:B0:73:EC:0F:02:FE:A8:70","sha256":"70:01:CE:F8:9D:67:13:DC:31:37:03:2C:22:AB:68:81:D6:DE:0C:E8:5F:F1:92:32:46:D8:04:E1:9A:38:2E:AD"}}},"request":{"raw":"GET /second-design/logo_blue.svg HTTP/1.1\r\nHost: marulabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://marulabet.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 11 Jan 2026 02:02:21 GMT\r\ncontent-type: image/svg+xml\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Sat, 27 Dec 2025 17:40:05 GMT\r\netag: W/\"556-19b60e56679\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=60xPb9kiQoOKZme8%2Buv%2Fehiubn6YrRR%2FuX58mSQCG6sXiUT9fqgSqN9EZa1%2B3JMqO9eBxVoBk8Mg%2F%2BZd%2BkuVEp3TDewxpkXa85d1\"}]}\r\ncf-ray: 9bc0d4d9284956ae-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1366,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"eb70d90349998f9fa492bc2a907fe894","sha1":"54823ba083d0332c2ac42162d1a4c6f47478050e","sha256":"00f69279206e53c192bdc9472d434b948a56123c7e5c2fce096432e54bd87f77","sha512":"c4c0009e1577c177a428fed81430f234d6f65c83f2b56934bfb8b6a1169f6488b06ff24e8a144e15fd427366ec65dee3694acc028ed433460ff5a6545ae24c68","ssdeep":"","tlshash":"1f210fb8b099d936d234d36cfb98d42591a082d7c4c58069b0c9fb2f98698c35f1e3f4","first_seen":"2025-06-29T20:05:39.730735Z","last_seen":"2026-02-19T17:02:28.733605Z","times_seen":79,"resource_available":false,"data":null}},"time_used":67,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":67,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-11","alert":"Sinkholed","trigger":"marulabet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"marulabet.com/_next/static/chunks/c9d86bbb7c4acdee.js","fqdn":"marulabet.com","domain":"marulabet.com","tld":"com"},"ip":{"addr":"104.21.14.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://marulabet.com/","date":"2026-01-11T02:02:20.426Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"marulabet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Dec 2025 13:13:09 GMT","end":"Mon, 30 Mar 2026 14:11:58 GMT"},"fingerprint":{"sha1":"FA:EA:E7:29:47:4D:0C:8A:97:DE:34:6B:B0:73:EC:0F:02:FE:A8:70","sha256":"70:01:CE:F8:9D:67:13:DC:31:37:03:2C:22:AB:68:81:D6:DE:0C:E8:5F:F1:92:32:46:D8:04:E1:9A:38:2E:AD"}}},"request":{"raw":"GET /_next/static/chunks/c9d86bbb7c4acdee.js HTTP/1.1\r\nHost: marulabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://marulabet.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 11 Jan 2026 02:02:20 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Tue, 30 Dec 2025 21:30:46 GMT\r\netag: W/\"6599e-19b712bab70\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Imhcfju5Ho1de0C42pcx6dNtVy3skcmhy9%2F8lRhh5inMQ5zsmwljZaR%2BSwa1Wdwqgiv1cwkrGJmYfemJK2yVSA4C7qNQUgumV8mT\"}]}\r\ncf-ray: 9bc0d4d5082b56ae-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":416158,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"375038ec8cec6aada72e25b152bbeef5","sha1":"c78b20a01aa625bdb0e1ab2358db14698586a570","sha256":"606e1f12073f6762a118cf232414bf2899bf3ffd6f7fd06ae61dd2363cd682aa","sha512":"97d64ef9834f0b04009a43f212061a31b40a484389b2959a10b49264597a5c6a9a2af0e7b45d248e3bbce3d70e036cee4a77bf53eaca3c7f7a670ab7d43b1c5e","ssdeep":"3072:ueuxDvbX1azHazaNQNYBr5XtP9hO9R3+VQVhUGHTbGpLsev6ns4xlPfetAvJQXEM:ueuxb7jV2ECNvms+lPnjz6x","tlshash":"2c940888b760b022835666e0052f944fe27ef92d6c4a44bcf654e8f57cbd889653bf34","first_seen":"2026-01-11T01:55:53.513192Z","last_seen":"2026-02-02T22:33:10.118728Z","times_seen":69,"resource_available":true,"data":null}},"time_used":165,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":65,"receive":100,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-11","alert":"Sinkholed","trigger":"marulabet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"marulabet.com/_next/static/chunks/d46c8391d5bdfe55.js","fqdn":"marulabet.com","domain":"marulabet.com","tld":"com"},"ip":{"addr":"104.21.14.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://marulabet.com/","date":"2026-01-11T02:02:20.387Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"marulabet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Dec 2025 13:13:09 GMT","end":"Mon, 30 Mar 2026 14:11:58 GMT"},"fingerprint":{"sha1":"FA:EA:E7:29:47:4D:0C:8A:97:DE:34:6B:B0:73:EC:0F:02:FE:A8:70","sha256":"70:01:CE:F8:9D:67:13:DC:31:37:03:2C:22:AB:68:81:D6:DE:0C:E8:5F:F1:92:32:46:D8:04:E1:9A:38:2E:AD"}}},"request":{"raw":"GET /_next/static/chunks/d46c8391d5bdfe55.js HTTP/1.1\r\nHost: marulabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://marulabet.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 11 Jan 2026 02:02:20 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Sat, 27 Dec 2025 18:15:16 GMT\r\netag: W/\"77ec-19b61059b20\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kbsNJts%2BJtrou1OldoMPgUmTb8%2F7sikyrXn6Mo3ImPd%2BQoN46072U1VhTM%2BPF9M2N60HFKq%2Br%2BCXr0rctCFDTN48iAeapq78W2yi\"}]}\r\ncf-ray: 9bc0d4d4d81256ae-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":30700,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (30341)","md5":"faa78fe4fb496d7d7e8e0291756cc1f3","sha1":"6bcdf2e14f91b5fee8d295edb9851320adfa4a5b","sha256":"ed4ffbc69e75f48ff9d13860973a024f747da39bfc52be9986bf425f80ee53be","sha512":"71425d412f0ab946f12fad31d78cc15dc986bebb3087ef3c8c99a5c4b63dfeb2518c28c878c89596f5f384ec5c4a094c97a3d5214610651a882d45a4d9f1c3a3","ssdeep":"384:Df58F5SF5BqXE0msKkymRd0cJ3ED79Fg/aW8qWtOPSNAatwMs:DB25SHBd0PwMIxCatwMs","tlshash":"9dd2c8b17395f9b352db86d9d03a0015f2290d3530ae28b0b394dcef368dd8991b9fa5","first_seen":"2025-12-31T07:43:06.411892Z","last_seen":"2026-04-28T01:10:54.127528Z","times_seen":185,"resource_available":true,"data":null}},"time_used":113,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":78,"receive":35,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-11","alert":"Sinkholed","trigger":"marulabet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"marulabet.com/_next/static/chunks/1d471c8bccf5cfcc.js","fqdn":"marulabet.com","domain":"marulabet.com","tld":"com"},"ip":{"addr":"104.21.14.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://marulabet.com/","date":"2026-01-11T02:02:20.404Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"marulabet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Dec 2025 13:13:09 GMT","end":"Mon, 30 Mar 2026 14:11:58 GMT"},"fingerprint":{"sha1":"FA:EA:E7:29:47:4D:0C:8A:97:DE:34:6B:B0:73:EC:0F:02:FE:A8:70","sha256":"70:01:CE:F8:9D:67:13:DC:31:37:03:2C:22:AB:68:81:D6:DE:0C:E8:5F:F1:92:32:46:D8:04:E1:9A:38:2E:AD"}}},"request":{"raw":"GET /_next/static/chunks/1d471c8bccf5cfcc.js HTTP/1.1\r\nHost: marulabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://marulabet.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 11 Jan 2026 02:02:20 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Wed, 07 Jan 2026 18:59:39 GMT\r\netag: W/\"c156-19b99d43178\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ETrz1GdG41CoegNyaiuqOIT2hq2OQFvgDQ5Q1Fk5sM77MqTcMD%2BXNAsHFIMaMuskMnuZLonYsZtW5IG9G8CAc%2FCGV4jBhlZ59vTl\"}]}\r\ncf-ray: 9bc0d4d4e81c56ae-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":49494,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (49134)","md5":"fd0a8c0ca6d1155349aa5bb9feb3aef1","sha1":"7cbfb6f54f5cd4df2a84f202616b775cf6164a30","sha256":"15a894c571aefc0a9366c4f61e78503d4656035cbedc0f5401f7220637552a5c","sha512":"ca050cad9216b7b82c41b62ca1ec41e0be6a744ce8fb87e751dc0b1e992ff99cdb1d367e2c92319047391376ff1af0a198cab61d81f99fcce9588aa632bd3a3d","ssdeep":"768:qETyxDZ/I3s0nMOnBCnKff5kk1WHfI3/w4YWHfIw/k4xl9OT3/JaroeE5GFZFqXm:qETyxDQVMOnEnKP3hsd/THyCfKeo","tlshash":"1423c5b690b25abdf76f00a9f02ed00cb52e4de8cb4f4956f6ac3cb126144456af27d4","first_seen":"2026-01-11T01:55:53.40965Z","last_seen":"2026-01-11T02:03:05.412676Z","times_seen":2,"resource_available":false,"data":null}},"time_used":119,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":71,"receive":48,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-11","alert":"Sinkholed","trigger":"marulabet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"marulabet.com/group/table?_rsc=1gi4n","fqdn":"marulabet.com","domain":"marulabet.com","tld":"com"},"ip":{"addr":"104.21.14.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://marulabet.com/","date":"2026-01-11T02:02:25.042Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"marulabet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Dec 2025 13:13:09 GMT","end":"Mon, 30 Mar 2026 14:11:58 GMT"},"fingerprint":{"sha1":"FA:EA:E7:29:47:4D:0C:8A:97:DE:34:6B:B0:73:EC:0F:02:FE:A8:70","sha256":"70:01:CE:F8:9D:67:13:DC:31:37:03:2C:22:AB:68:81:D6:DE:0C:E8:5F:F1:92:32:46:D8:04:E1:9A:38:2E:AD"}}},"request":{"raw":"GET /group/table?_rsc=1gi4n HTTP/1.1\r\nHost: marulabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://marulabet.com/\r\nrsc: 1\r\nnext-router-prefetch: 1\r\nnext-router-segment-prefetch: /!KHVzZXItc2lkZSk/$d$M/second-design/!KGhvbWUp/group/$d$group\r\nnext-url: /marulabet.com%26blue%26en/second-design\r\nsentry-trace: 9ffef7b14fef40b3bd2e466e13219bb9-89071b324a7a8636-0\r\nbaggage: sentry-environment=production,sentry-release=web%402.7.0,sentry-public_key=6d319d1014d598ea4a0365923853ee67,sentry-trace_id=9ffef7b14fef40b3bd2e466e13219bb9,sentry-sampled=false,sentry-sample_rand=0.22013458521750728,sentry-sample_rate=0.1\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 11 Jan 2026 02:02:25 GMT\r\ncontent-type: text/x-component\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nx-nextjs-rewritten-path: /marulabet.com\u0026blue\u0026en/second-design/group/table\r\nx-middleware-rewrite: /marulabet.com\u0026blue\u0026en/second-design/group/table?_rsc=1gi4n\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch, Accept-Encoding\r\nx-nextjs-cache: HIT\r\nx-nextjs-prerender: 1\r\nx-nextjs-postponed: 2\r\ncache-control: s-maxage=600, stale-while-revalidate=31535400\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GnwoHvP6GwlruUN89EnwNRYgus6WpMeXYgJqPABMjrlN5UW6ORvB2zF4ssBUtPgfduBBUJT15aagBX0rC%2BBzufhQNwNBPxzXooXy\"}]}\r\ncf-ray: 9bc0d4f2890656ae-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":520,"size_decoded":0,"mime_type":"text/x-component","magic":"ASCII text","md5":"cae286cc5150ca9e140002b466382032","sha1":"808cbc33e587c522661c3a71f7c9a2f4593ee43c","sha256":"9349b2186e1004b44bee7c066fdd6957343d7d566c713868881e88769e334aa7","sha512":"b1c732329240455085c84a12e473d8986e5fe1abc1fcf0e71e30fe2312ae09bc31d5e4c37944b3427ae36b99e276ee07fdb591a051fc9b39959ce970274a3b7e","ssdeep":"","tlshash":"1af027a3d40dee291d3dcc8c0e5e6363855d8c7fdab12ab992acce6c068513a1b496c0","first_seen":"2026-01-11T01:55:53.415353Z","last_seen":"2026-01-11T02:03:05.218009Z","times_seen":2,"resource_available":false,"data":null}},"time_used":133,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":133,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-11","alert":"Sinkholed","trigger":"marulabet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"marulabet.com/_next/static/chunks/22b2d1508dc2e8f0.js","fqdn":"marulabet.com","domain":"marulabet.com","tld":"com"},"ip":{"addr":"104.21.14.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://marulabet.com/","date":"2026-01-11T02:02:25.216Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"marulabet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Dec 2025 13:13:09 GMT","end":"Mon, 30 Mar 2026 14:11:58 GMT"},"fingerprint":{"sha1":"FA:EA:E7:29:47:4D:0C:8A:97:DE:34:6B:B0:73:EC:0F:02:FE:A8:70","sha256":"70:01:CE:F8:9D:67:13:DC:31:37:03:2C:22:AB:68:81:D6:DE:0C:E8:5F:F1:92:32:46:D8:04:E1:9A:38:2E:AD"}}},"request":{"raw":"GET /_next/static/chunks/22b2d1508dc2e8f0.js HTTP/1.1\r\nHost: marulabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://marulabet.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 11 Jan 2026 02:02:25 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Tue, 06 Jan 2026 19:23:39 GMT\r\netag: W/\"de5-19b94c3ce78\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=k6MFMKCPxb2WHbrUVK5hHQeH5ZgGP1MmXCflD7AwBKlvO%2F%2FCDim1DDGftsmXrEW6Ist%2F9wew2OyVgmOM1oxVaSGPCEtEj5eZv8IE\"}]}\r\ncf-ray: 9bc0d4f3a90f56ae-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3557,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (3200)","md5":"49df7c7b3e62153815f3cb5ac73aad46","sha1":"1c19ff29be1a081ab3c15cf67e3bd1173ad43607","sha256":"72a09495bb2499cce711fb66e4ac014f2622e0eb50b77e57500d6089b8a8d4f8","sha512":"8c9e5d79e1523f356c21863da3872cb185fa55acf7d453f2dc3982fd6a44ada5d5c3d547ddc16ca61add329f2d278255da511b185fa83afaf3cbcae28c6251a5","ssdeep":"","tlshash":"c671b4c801155bdce1b601a4ad3ec00ee0592ebdce5e9839b4fc78751e22481be99fca","first_seen":"2026-01-11T01:55:53.41615Z","last_seen":"2026-01-11T02:03:05.41721Z","times_seen":2,"resource_available":true,"data":null}},"time_used":54,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":54,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-11","alert":"Sinkholed","trigger":"marulabet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"marulabet.com/group/live?_rsc=1gi4n","fqdn":"marulabet.com","domain":"marulabet.com","tld":"com"},"ip":{"addr":"104.21.14.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://marulabet.com/","date":"2026-01-11T02:02:25.219Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"marulabet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Dec 2025 13:13:09 GMT","end":"Mon, 30 Mar 2026 14:11:58 GMT"},"fingerprint":{"sha1":"FA:EA:E7:29:47:4D:0C:8A:97:DE:34:6B:B0:73:EC:0F:02:FE:A8:70","sha256":"70:01:CE:F8:9D:67:13:DC:31:37:03:2C:22:AB:68:81:D6:DE:0C:E8:5F:F1:92:32:46:D8:04:E1:9A:38:2E:AD"}}},"request":{"raw":"GET /group/live?_rsc=1gi4n HTTP/1.1\r\nHost: marulabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://marulabet.com/\r\nrsc: 1\r\nnext-router-prefetch: 1\r\nnext-router-segment-prefetch: /!KHVzZXItc2lkZSk/$d$M/second-design/!KGhvbWUp/group/$d$group\r\nnext-url: /marulabet.com%26blue%26en/second-design\r\nsentry-trace: 9ffef7b14fef40b3bd2e466e13219bb9-a8ce6164d57797d0-0\r\nbaggage: sentry-environment=production,sentry-release=web%402.7.0,sentry-public_key=6d319d1014d598ea4a0365923853ee67,sentry-trace_id=9ffef7b14fef40b3bd2e466e13219bb9,sentry-sampled=false,sentry-sample_rand=0.22013458521750728,sentry-sample_rate=0.1\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 11 Jan 2026 02:02:25 GMT\r\ncontent-type: text/x-component\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nx-nextjs-rewritten-path: /marulabet.com\u0026blue\u0026en/second-design/group/live\r\nx-middleware-rewrite: /marulabet.com\u0026blue\u0026en/second-design/group/live?_rsc=1gi4n\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch, Accept-Encoding\r\nx-nextjs-cache: HIT\r\nx-nextjs-prerender: 1\r\nx-nextjs-postponed: 2\r\ncache-control: s-maxage=600, stale-while-revalidate=31535400\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=iETEPSuFFCa0NrmHIxkBWGXmZyY5a7s9WnMGJWcUYnFS97Sf7o%2F1L8Bi6SlaGSXMgZibBvZm5qwriaPJhgJo4tOoRnNig4cq%2F1E6\"}]}\r\ncf-ray: 9bc0d4f3a91056ae-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":520,"size_decoded":0,"mime_type":"text/x-component","magic":"ASCII text","md5":"cae286cc5150ca9e140002b466382032","sha1":"808cbc33e587c522661c3a71f7c9a2f4593ee43c","sha256":"9349b2186e1004b44bee7c066fdd6957343d7d566c713868881e88769e334aa7","sha512":"b1c732329240455085c84a12e473d8986e5fe1abc1fcf0e71e30fe2312ae09bc31d5e4c37944b3427ae36b99e276ee07fdb591a051fc9b39959ce970274a3b7e","ssdeep":"","tlshash":"1af027a3d40dee291d3dcc8c0e5e6363855d8c7fdab12ab992acce6c068513a1b496c0","first_seen":"2026-01-11T01:55:53.415353Z","last_seen":"2026-01-11T02:03:05.218009Z","times_seen":2,"resource_available":false,"data":null}},"time_used":110,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":110,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-11","alert":"Sinkholed","trigger":"marulabet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"marulabet.com/_next/static/media/DMSans_Regular-s.p.e7e0f28b.ttf","fqdn":"marulabet.com","domain":"marulabet.com","tld":"com"},"ip":{"addr":"104.21.14.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://marulabet.com/","date":"2026-01-11T02:02:20.327Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"marulabet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Dec 2025 13:13:09 GMT","end":"Mon, 30 Mar 2026 14:11:58 GMT"},"fingerprint":{"sha1":"FA:EA:E7:29:47:4D:0C:8A:97:DE:34:6B:B0:73:EC:0F:02:FE:A8:70","sha256":"70:01:CE:F8:9D:67:13:DC:31:37:03:2C:22:AB:68:81:D6:DE:0C:E8:5F:F1:92:32:46:D8:04:E1:9A:38:2E:AD"}}},"request":{"raw":"GET /_next/static/media/DMSans_Regular-s.p.e7e0f28b.ttf HTTP/1.1\r\nHost: marulabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://marulabet.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 11 Jan 2026 02:02:20 GMT\r\ncontent-type: font/ttf\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Thu, 25 Dec 2025 14:07:50 GMT\r\netag: W/\"dc20-19b55d65af0\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=U%2BFF2UB6flm4F8KR%2FLefrUlANLAQBh9dQZB5Az5%2BEMbE4SYWwe9p6VTNJzFEb%2BalS1n3pIYFP0rGiZweqHsIHFJO%2Fvq8HWeHO9PB\"}]}\r\ncf-ray: 9bc0d4d4affa56ae-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":56352,"size_decoded":0,"mime_type":"font/ttf","magic":"TrueType Font data, 16 tables, 1st \"GDEF\", 42 names, Microsoft, language 0x409","md5":"0305ad7453af42d8f036dd29294ae5c3","sha1":"ac9a042a40e49e8cdbfe0e64e84d9b1c5724e98d","sha256":"7a73e6aa8107e0046eae5dd713bf4752d93e689f57d51c45b1545acddfd71be3","sha512":"d5a1bc2041edc0debccd45637460ac89ac3234859029b8507072d6232bf0f0e9229864ce51ea3b43eacfdbb029228242bfdca046ef86db05a1ab278ddeca209b","ssdeep":"768:VJRyPX2U7ifzsuaBqydjkUP057fhrrXtk1ay8zENP4EgzwtCE:DRyf57eQFdjkS0HC1aSAbwtR","tlshash":"60434b16f716871ee2936eb9c673d3a4e7b5bd30be23434b64755b2ade0b0e44c21284","first_seen":"2023-11-01T17:45:54Z","last_seen":"2026-08-05T12:04:48.412884Z","times_seen":876,"resource_available":false,"data":null}},"time_used":150,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":79,"receive":71,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-11","alert":"Sinkholed","trigger":"marulabet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"marulabet.com/_next/static/chunks/1ec995c28e06b40b.js","fqdn":"marulabet.com","domain":"marulabet.com","tld":"com"},"ip":{"addr":"104.21.14.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://marulabet.com/","date":"2026-01-11T02:02:20.460Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"marulabet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Dec 2025 13:13:09 GMT","end":"Mon, 30 Mar 2026 14:11:58 GMT"},"fingerprint":{"sha1":"FA:EA:E7:29:47:4D:0C:8A:97:DE:34:6B:B0:73:EC:0F:02:FE:A8:70","sha256":"70:01:CE:F8:9D:67:13:DC:31:37:03:2C:22:AB:68:81:D6:DE:0C:E8:5F:F1:92:32:46:D8:04:E1:9A:38:2E:AD"}}},"request":{"raw":"GET /_next/static/chunks/1ec995c28e06b40b.js HTTP/1.1\r\nHost: marulabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://marulabet.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 11 Jan 2026 02:02:20 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Sat, 27 Dec 2025 18:15:14 GMT\r\netag: W/\"c3db-19b61059350\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Tc1m%2BkgSPlHghXz5MUYlSnTNCxS6UCrN1uejJ2Xjnm6oJueRKV529d%2FdjOFr%2BxxoNJjpP3KqowSDFVu0MyN%2FuQCF9vIysOKDNJTH\"}]}\r\ncf-ray: 9bc0d4d5483656ae-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":50139,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (49782)","md5":"5c6f50150eb922ddd129e2e9b4b2158a","sha1":"869878865a2a826e90f35fc4a71f2d1fd505475a","sha256":"0efc9e52e984a1cc3288b57d42bdaa1597382b35629819328104ea100e063562","sha512":"422729f8e4bfa67fb7f3e8207774efbc10695920027cc77b0177d2a22a8dd9fcee033b37747a18cafd3457194aa694a2885f8a3aa0aff164e431dc0168358fed","ssdeep":"768:J5OqOdU7FKN/Htv228zYhnVMZ34f6OR+HRMOXhfuFgXFyLP69Ob8ZtI:vObU5W/Nv5nVMZRBHRMshfuFC85bWI","tlshash":"0f33e7957111b976899f82ffa05654bdb33c9a08c40d9128b97f9c6e332c1e4f163f2a","first_seen":"2026-01-11T01:55:53.568004Z","last_seen":"2026-01-11T02:03:05.423112Z","times_seen":2,"resource_available":true,"data":null}},"time_used":88,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":69,"receive":19,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-11","alert":"Sinkholed","trigger":"marulabet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"marulabet.com/_next/static/chunks/364db5199b63c56b.js","fqdn":"marulabet.com","domain":"marulabet.com","tld":"com"},"ip":{"addr":"104.21.14.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://marulabet.com/","date":"2026-01-11T02:02:20.465Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"marulabet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Dec 2025 13:13:09 GMT","end":"Mon, 30 Mar 2026 14:11:58 GMT"},"fingerprint":{"sha1":"FA:EA:E7:29:47:4D:0C:8A:97:DE:34:6B:B0:73:EC:0F:02:FE:A8:70","sha256":"70:01:CE:F8:9D:67:13:DC:31:37:03:2C:22:AB:68:81:D6:DE:0C:E8:5F:F1:92:32:46:D8:04:E1:9A:38:2E:AD"}}},"request":{"raw":"GET /_next/static/chunks/364db5199b63c56b.js HTTP/1.1\r\nHost: marulabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://marulabet.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 11 Jan 2026 02:02:20 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xYtBRgDHrSIDUkjkYlsYWzZ%2BY%2FRmIvkiSFgVVHPx8pGDvGV4HOmpKJGNWkn0T8nbiJfi5V8AjXtjg0saJlnnKkeAGSrZXfQLl1DP\"}]}\r\npriority: u=3,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: br\r\nlast-modified: Sat, 27 Dec 2025 18:15:15 GMT\r\netag: W/\"364-19b61059738\"\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9bc0d4d5483b56ae-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":868,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (511)","md5":"104e09d4a485b6e149230bdf75435003","sha1":"368bb8482c54cc5a99d7b0faea12558d25fee0eb","sha256":"1d0199350294ba024619adf51e73e2f8d4333cfac631745d250116d177ee1bbb","sha512":"51d153a2f0d484eb0072b8626df78735518757329dafd004d9c9673042d6af9dc02aec840b227350de82b71855af7eed0e429fdb688e42add8250d27de755a7e","ssdeep":"","tlshash":"6a112f842a106a50543d21fed07f49536942093b834e8d76e33c18b83b2e9cd87852cb","first_seen":"2026-01-11T01:55:53.451529Z","last_seen":"2026-01-11T02:03:05.427304Z","times_seen":2,"resource_available":false,"data":null}},"time_used":63,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":56,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-11","alert":"Sinkholed","trigger":"marulabet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"marulabet.com/api/bets/lastWinsNew?filter=highWins\u0026limit=30","fqdn":"marulabet.com","domain":"marulabet.com","tld":"com"},"ip":{"addr":"104.21.14.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://marulabet.com/","date":"2026-01-11T02:02:22.840Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"marulabet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Dec 2025 13:13:09 GMT","end":"Mon, 30 Mar 2026 14:11:58 GMT"},"fingerprint":{"sha1":"FA:EA:E7:29:47:4D:0C:8A:97:DE:34:6B:B0:73:EC:0F:02:FE:A8:70","sha256":"70:01:CE:F8:9D:67:13:DC:31:37:03:2C:22:AB:68:81:D6:DE:0C:E8:5F:F1:92:32:46:D8:04:E1:9A:38:2E:AD"}}},"request":{"raw":"GET /api/bets/lastWinsNew?filter=highWins\u0026limit=30 HTTP/1.1\r\nHost: marulabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://marulabet.com/\r\nContent-Type: application/json\r\nAuthorization: Bearer undefined\r\nsentry-trace: 9ffef7b14fef40b3bd2e466e13219bb9-b365c085eebbee17-0\r\nbaggage: sentry-environment=production,sentry-release=web%402.7.0,sentry-public_key=6d319d1014d598ea4a0365923853ee67,sentry-trace_id=9ffef7b14fef40b3bd2e466e13219bb9,sentry-sampled=false,sentry-sample_rand=0.22013458521750728,sentry-sample_rate=0.1\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 11 Jan 2026 02:02:22 GMT\r\ncontent-type: application/json; charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=uc0WcLYvJsdBDnYOm2HZRcMhV9nwRugS8nPK9GsbKLNrnrE3GHs1SWjIJBh%2FYjM7z5ge91uOnChlG9QGdTbbJ5t7a6oCXtd15EVQ\"}]}\r\npriority: u=4,i=?0\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\netag: W/\"1bf9-/2pdJJskLBuY/UuOa9dqGeHsTYM\"\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9bc0d4e4c88b56ae-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7161,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"4eb63c101560bd5843302c0805d4dffa","sha1":"ff6a5d249b242c1b98fd4b8e6bd76a19e1ec4d83","sha256":"7fa0882c3a5b8dc6f09843e2e389ab8b8d41fc4a68b2a117a2ed19b639f6f645","sha512":"b0841187f079d22f849ff0325d4540bc3ae5a51703e1198da09d85e7d335959f412955885629d6483bf1aac7e4e136815bcdb79c652a0b32d36c09ad5de42833","ssdeep":"192:4ECehbtZK/4PZ8wJYz57tRii0N0pn/KSGH2kcMnfPkEpyrE:X/KTF+0B/W3k6","tlshash":"08e19f3965bd1dd841281dd2f1d33618acecb51724884da0866dcf3ea2e8c56fe065fb","first_seen":"2026-01-11T02:03:05.43048Z","last_seen":"2026-01-11T02:03:05.43048Z","times_seen":1,"resource_available":false,"data":null}},"time_used":90,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":86,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-11","alert":"Sinkholed","trigger":"marulabet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"marulabet.com/?action=register","fqdn":"marulabet.com","domain":"marulabet.com","tld":"com"},"ip":{"addr":"104.21.14.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://marulabet.com/","date":"2026-01-11T02:02:23.818Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"marulabet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Dec 2025 13:13:09 GMT","end":"Mon, 30 Mar 2026 14:11:58 GMT"},"fingerprint":{"sha1":"FA:EA:E7:29:47:4D:0C:8A:97:DE:34:6B:B0:73:EC:0F:02:FE:A8:70","sha256":"70:01:CE:F8:9D:67:13:DC:31:37:03:2C:22:AB:68:81:D6:DE:0C:E8:5F:F1:92:32:46:D8:04:E1:9A:38:2E:AD"}}},"request":{"raw":"GET /?action=register HTTP/1.1\r\nHost: marulabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nrsc: 1\r\nnext-router-prefetch: 1\r\nnext-router-segment-prefetch: /_tree\r\nnext-url: /marulabet.com%26blue%26en/second-design\r\nsentry-trace: 9ffef7b14fef40b3bd2e466e13219bb9-98e2028fe4bf77a2-0\r\nbaggage: sentry-environment=production,sentry-release=web%402.7.0,sentry-public_key=6d319d1014d598ea4a0365923853ee67,sentry-trace_id=9ffef7b14fef40b3bd2e466e13219bb9,sentry-sampled=false,sentry-sample_rand=0.22013458521750728,sentry-sample_rate=0.1\r\nReferer: https://marulabet.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 11 Jan 2026 02:02:23 GMT\r\ncontent-type: text/x-component\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nx-nextjs-rewritten-path: /marulabet.com\u0026blue\u0026en/second-design\r\nx-middleware-rewrite: /marulabet.com\u0026blue\u0026en/second-design?action=register\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch, Accept-Encoding\r\nx-nextjs-cache: HIT\r\nx-nextjs-prerender: 1\r\nx-nextjs-postponed: 2\r\ncache-control: s-maxage=600, stale-while-revalidate=31535400\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=oy18pDVZnm15usE%2FhewiTbrRLfCYf0My5XhKoeYLtXTdJa5tT4WQKQbUxNMzhx0NhTOErEp9vtT%2Fxk2MvXA4hRmN5LywY%2BowjU6M\"}]}\r\ncf-ray: 9bc0d4eac8bf56ae-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2333,"size_decoded":0,"mime_type":"text/x-component","magic":"ASCII text, with very long lines (824)","md5":"6692d7ef9eec533159bb5395328be1c6","sha1":"0b2a9e2255b68734cc3d0861aad1c9f452ecdfa3","sha256":"28f8817de7e458b38061ed4462ee3d2c092cc6b93dde09569f0cae3b480a4184","sha512":"50db858ff850252a14f071bd616fc4f2713a399aa2f13c3d35e521acee21313175145af615c409289c821606b4d2e9b7974e18eb6f61f3bde056fea40e5c344f","ssdeep":"","tlshash":"2a419e0cc8499eb498c9d59a61d5d7016558bf37f1b88dace04bdca4038b03d0feab87","first_seen":"2026-01-11T02:03:05.260326Z","last_seen":"2026-01-11T02:03:05.260326Z","times_seen":1,"resource_available":false,"data":null}},"time_used":88,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":88,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-11","alert":"Sinkholed","trigger":"marulabet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"marulabet.com/_next/static/chunks/1d8278968b92360e.js","fqdn":"marulabet.com","domain":"marulabet.com","tld":"com"},"ip":{"addr":"104.21.14.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://marulabet.com/","date":"2026-01-11T02:02:20.466Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"marulabet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Dec 2025 13:13:09 GMT","end":"Mon, 30 Mar 2026 14:11:58 GMT"},"fingerprint":{"sha1":"FA:EA:E7:29:47:4D:0C:8A:97:DE:34:6B:B0:73:EC:0F:02:FE:A8:70","sha256":"70:01:CE:F8:9D:67:13:DC:31:37:03:2C:22:AB:68:81:D6:DE:0C:E8:5F:F1:92:32:46:D8:04:E1:9A:38:2E:AD"}}},"request":{"raw":"GET /_next/static/chunks/1d8278968b92360e.js HTTP/1.1\r\nHost: marulabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://marulabet.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 11 Jan 2026 02:02:20 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Sat, 27 Dec 2025 18:15:14 GMT\r\netag: W/\"7b35-19b61059350\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=J%2FIrXO%2F3bwIjOKaoNPOPNIq%2BarCxTHt8sHjl%2Bb4zIuQXVT628a16pak58L%2FNcBR4tF0hY2xFzr8G3%2BbxvIDZ8pQ5TYWUdzSo7ItV\"}]}\r\ncf-ray: 9bc0d4d5483c56ae-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":31541,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (31184)","md5":"e5179e89d99baf52797f24105189d4bc","sha1":"d974bf4950afadea4a0076927f161eac3dfeb055","sha256":"86f986e1571bf5dda53da18ac84496726aeb00b3980533fd917380d68469a8b0","sha512":"81f677899b0eed324f5f70d95aeb73d92cdc1b0ef95693949b1c8d1fe7361a51c38cc1e114a27f6877dcb966419123e99441da1d18645337bc79facb0cccce6e","ssdeep":"768:qugNIiqWiEdR9uDFyXXyRYgx5RJK+wglNjzjaSGyXOu:q5IiqVts+wgTqSGyXOu","tlshash":"ede2da817411f87a89af92efa0e60462937d7709e0088624787f9e2c772d609b157f7b","first_seen":"2026-01-11T01:55:53.487198Z","last_seen":"2026-02-19T17:02:28.609324Z","times_seen":73,"resource_available":true,"data":null}},"time_used":82,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":69,"receive":13,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-11","alert":"Sinkholed","trigger":"marulabet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"marulabet.com/api/games/home","fqdn":"marulabet.com","domain":"marulabet.com","tld":"com"},"ip":{"addr":"104.21.14.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://marulabet.com/","date":"2026-01-11T02:02:21.784Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"marulabet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Dec 2025 13:13:09 GMT","end":"Mon, 30 Mar 2026 14:11:58 GMT"},"fingerprint":{"sha1":"FA:EA:E7:29:47:4D:0C:8A:97:DE:34:6B:B0:73:EC:0F:02:FE:A8:70","sha256":"70:01:CE:F8:9D:67:13:DC:31:37:03:2C:22:AB:68:81:D6:DE:0C:E8:5F:F1:92:32:46:D8:04:E1:9A:38:2E:AD"}}},"request":{"raw":"GET /api/games/home HTTP/1.1\r\nHost: marulabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://marulabet.com/\r\nContent-Type: application/json\r\nAuthorization: Bearer undefined\r\nsentry-trace: 9ffef7b14fef40b3bd2e466e13219bb9-b65a64e91875856b-0\r\nbaggage: sentry-environment=production,sentry-release=web%402.7.0,sentry-public_key=6d319d1014d598ea4a0365923853ee67,sentry-trace_id=9ffef7b14fef40b3bd2e466e13219bb9,sentry-sampled=false,sentry-sample_rand=0.22013458521750728,sentry-sample_rate=0.1\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 11 Jan 2026 02:02:22 GMT\r\ncontent-type: application/json; charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GrEgpTCVWgczLLh%2FOoZQgrq8guNyy0lM6TLbHgGUCi1wpitALdukYTQwnk8G2peBZAnj5oKV%2F24kBQIRt9X2fKkWSGHczr%2B5bq%2Fx\"}]}\r\npriority: u=4,i=?0\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\netag: W/\"3551-CAEBmclch0uX8PGPGY6Rv8rzTeQ\"\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9bc0d4de186956ae-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13649,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"f0b4396c487fd8ecac00ee222b52f0a3","sha1":"08010199c95c874b97f0f18f198e91bfcaf34de4","sha256":"818f5403c6578e502ca52b1586c037e3c920463d1c9275c68d9cc01e0e93471f","sha512":"42bc2a83c08f15463b420a6554c932ead356cf045f4e964c18040abc1c6a6ca4229eaf541a621102278bb31382f22387114b6b7a59af2f08f8b6a0c7833357f0","ssdeep":"192:NeMfcWLL3n7nt1Ef8JmxEPv7a29G71GDu4AhiEIT8rj8:1Lzg710siCw","tlshash":"ca52c0bac4954ca9435f6f0110c72d0ef4bd2e2331c81c69681aee3cd99dd97e60769b","first_seen":"2026-01-11T01:55:53.420354Z","last_seen":"2026-01-11T02:03:05.434685Z","times_seen":2,"resource_available":false,"data":null}},"time_used":403,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":389,"receive":14,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-11","alert":"Sinkholed","trigger":"marulabet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"marulabet.com/providers?_rsc=r54j0","fqdn":"marulabet.com","domain":"marulabet.com","tld":"com"},"ip":{"addr":"104.21.14.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://marulabet.com/","date":"2026-01-11T02:02:22.441Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"marulabet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Dec 2025 13:13:09 GMT","end":"Mon, 30 Mar 2026 14:11:58 GMT"},"fingerprint":{"sha1":"FA:EA:E7:29:47:4D:0C:8A:97:DE:34:6B:B0:73:EC:0F:02:FE:A8:70","sha256":"70:01:CE:F8:9D:67:13:DC:31:37:03:2C:22:AB:68:81:D6:DE:0C:E8:5F:F1:92:32:46:D8:04:E1:9A:38:2E:AD"}}},"request":{"raw":"GET /providers?_rsc=r54j0 HTTP/1.1\r\nHost: marulabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://marulabet.com/\r\nrsc: 1\r\nnext-router-prefetch: 1\r\nnext-router-segment-prefetch: /_tree\r\nnext-url: /marulabet.com%26blue%26en/second-design\r\nsentry-trace: 9ffef7b14fef40b3bd2e466e13219bb9-beb598195a998c48-0\r\nbaggage: sentry-environment=production,sentry-release=web%402.7.0,sentry-public_key=6d319d1014d598ea4a0365923853ee67,sentry-trace_id=9ffef7b14fef40b3bd2e466e13219bb9,sentry-sampled=false,sentry-sample_rand=0.22013458521750728,sentry-sample_rate=0.1\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 11 Jan 2026 02:02:22 GMT\r\ncontent-type: text/x-component\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nx-nextjs-rewritten-path: /marulabet.com\u0026blue\u0026en/second-design/providers\r\nx-middleware-rewrite: /marulabet.com\u0026blue\u0026en/second-design/providers?_rsc=r54j0\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch, Accept-Encoding\r\nx-nextjs-cache: HIT\r\nx-nextjs-prerender: 1\r\nx-nextjs-postponed: 2\r\ncache-control: s-maxage=600, stale-while-revalidate=31535400\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=W1BDrMGYJ%2F7ZJlMwrTey%2BXUTf6BIcLdI1Bh3sodFK2IlRHBjPbrKla4EAyCVK1oShTAOuLZGREUxjSvucoidoEy6KAYK5WtuJzxl\"}]}\r\ncf-ray: 9bc0d4e2388256ae-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2463,"size_decoded":0,"mime_type":"text/x-component","magic":"ASCII text, with very long lines (954)","md5":"0ea89c17ea24d9a7761eab328446f19f","sha1":"6f388983079748780c869c4756503fe7b9457d1d","sha256":"9d342fe6de71d71c01a46980ea5a76a782401e098906af8af9e16dd603cd09ff","sha512":"e745fa4da5095bc1ecb1b7904c0b1841fa7b26b0e4cee7204923d07d8135b34c2677defda5ae892b28f7f82c966c9e3363d52494f7ce202de3c24367a2939ba0","ssdeep":"","tlshash":"02519d0dc8499db498d9d59962d5d7016658af3bf1b88cace04bdc64028f03d0faab87","first_seen":"2026-01-11T02:03:05.436595Z","last_seen":"2026-01-11T02:03:05.436595Z","times_seen":1,"resource_available":false,"data":null}},"time_used":150,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":150,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-11","alert":"Sinkholed","trigger":"marulabet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"marulabet.com/games_new_webp/hacksaw-buffalo-stack-n-sync.webp","fqdn":"marulabet.com","domain":"marulabet.com","tld":"com"},"ip":{"addr":"104.21.14.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://marulabet.com/","date":"2026-01-11T02:02:23.773Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"marulabet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Dec 2025 13:13:09 GMT","end":"Mon, 30 Mar 2026 14:11:58 GMT"},"fingerprint":{"sha1":"FA:EA:E7:29:47:4D:0C:8A:97:DE:34:6B:B0:73:EC:0F:02:FE:A8:70","sha256":"70:01:CE:F8:9D:67:13:DC:31:37:03:2C:22:AB:68:81:D6:DE:0C:E8:5F:F1:92:32:46:D8:04:E1:9A:38:2E:AD"}}},"request":{"raw":"GET /games_new_webp/hacksaw-buffalo-stack-n-sync.webp HTTP/1.1\r\nHost: marulabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://marulabet.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 11 Jan 2026 02:02:23 GMT\r\ncontent-type: image/webp\r\ncontent-length: 14058\r\npriority: u=4,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Thu, 01 Jan 2026 18:08:27 GMT\r\netag: W/\"36ea-19b7abf2978\"\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=X2IEQBpdFb7m4AjivKL1ty%2BDH1hGEw5IpfUf%2FjRlJG3P4N98suDKosHBZ0dCoeMeIta1fdiObTsM%2BySttgEK3oPed25rHY0peWXP\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9bc0d4ea78ae56ae-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":14058,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 180x236, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"393513caefbbf8a1002be292bedf0f68","sha1":"c99dfdde768b942cbc6b365705246ccba9de40a2","sha256":"d9a1ae5a6e11f4fae0bc813db7f46e982c274f0de538e3f2c5bed63f3ffba9a9","sha512":"45a1e1482425b65851dba3fcc625093f9b2b94f0c31dc365fbcd2feddbafec3a60050c8aa6c11569dfc9cc61a03a4b5462fb1be7a88b60effc6bdbf1437e3125","ssdeep":"384:E1CgQwm64iKF4fflO5dT3ijYNHMRwvudJ0TJFp:EkgQwm9qffI5dT3ikaRwmnk/","tlshash":"1852b0d6f541e72e91a3a7e241ed4509f57802ed45dcf565183b788a18ae32cdf07323","first_seen":"2026-01-11T02:03:05.440001Z","last_seen":"2026-01-11T02:03:05.440001Z","times_seen":1,"resource_available":false,"data":null}},"time_used":75,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":61,"receive":14,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-11","alert":"Sinkholed","trigger":"marulabet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"marulabet.com/group/table?_rsc=webul","fqdn":"marulabet.com","domain":"marulabet.com","tld":"com"},"ip":{"addr":"104.21.14.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://marulabet.com/","date":"2026-01-11T02:02:24.962Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"marulabet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Dec 2025 13:13:09 GMT","end":"Mon, 30 Mar 2026 14:11:58 GMT"},"fingerprint":{"sha1":"FA:EA:E7:29:47:4D:0C:8A:97:DE:34:6B:B0:73:EC:0F:02:FE:A8:70","sha256":"70:01:CE:F8:9D:67:13:DC:31:37:03:2C:22:AB:68:81:D6:DE:0C:E8:5F:F1:92:32:46:D8:04:E1:9A:38:2E:AD"}}},"request":{"raw":"GET /group/table?_rsc=webul HTTP/1.1\r\nHost: marulabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://marulabet.com/\r\nrsc: 1\r\nnext-router-prefetch: 1\r\nnext-router-segment-prefetch: /!KHVzZXItc2lkZSk/$d$M/second-design/!KGhvbWUp/group\r\nnext-url: /marulabet.com%26blue%26en/second-design\r\nsentry-trace: 9ffef7b14fef40b3bd2e466e13219bb9-9a1379d9826f4203-0\r\nbaggage: sentry-environment=production,sentry-release=web%402.7.0,sentry-public_key=6d319d1014d598ea4a0365923853ee67,sentry-trace_id=9ffef7b14fef40b3bd2e466e13219bb9,sentry-sampled=false,sentry-sample_rand=0.22013458521750728,sentry-sample_rate=0.1\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 11 Jan 2026 02:02:25 GMT\r\ncontent-type: text/x-component\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nx-nextjs-rewritten-path: /marulabet.com\u0026blue\u0026en/second-design/group/table\r\nx-middleware-rewrite: /marulabet.com\u0026blue\u0026en/second-design/group/table?_rsc=webul\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch, Accept-Encoding\r\nx-nextjs-cache: HIT\r\nx-nextjs-prerender: 1\r\nx-nextjs-postponed: 2\r\ncache-control: s-maxage=600, stale-while-revalidate=31535400\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Wq8arvGIR3pgyQGfqHP4FlyxAmLx6L6CocwxnvtjnstaXCMfTA%2F0IQ360Q76RVhSI5xoOpjHP1dDEjotSJIBXot7xbkJeh1Pn%2FRN\"}]}\r\ncf-ray: 9bc0d4f2090356ae-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":520,"size_decoded":0,"mime_type":"text/x-component","magic":"ASCII text","md5":"cae286cc5150ca9e140002b466382032","sha1":"808cbc33e587c522661c3a71f7c9a2f4593ee43c","sha256":"9349b2186e1004b44bee7c066fdd6957343d7d566c713868881e88769e334aa7","sha512":"b1c732329240455085c84a12e473d8986e5fe1abc1fcf0e71e30fe2312ae09bc31d5e4c37944b3427ae36b99e276ee07fdb591a051fc9b39959ce970274a3b7e","ssdeep":"","tlshash":"1af027a3d40dee291d3dcc8c0e5e6363855d8c7fdab12ab992acce6c068513a1b496c0","first_seen":"2026-01-11T01:55:53.415353Z","last_seen":"2026-01-11T02:03:05.218009Z","times_seen":2,"resource_available":false,"data":null}},"time_used":92,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":92,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-11","alert":"Sinkholed","trigger":"marulabet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"marulabet.com/_next/static/chunks/994e0443052d40d3.js","fqdn":"marulabet.com","domain":"marulabet.com","tld":"com"},"ip":{"addr":"104.21.14.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://marulabet.com/","date":"2026-01-11T02:02:20.372Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"marulabet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Dec 2025 13:13:09 GMT","end":"Mon, 30 Mar 2026 14:11:58 GMT"},"fingerprint":{"sha1":"FA:EA:E7:29:47:4D:0C:8A:97:DE:34:6B:B0:73:EC:0F:02:FE:A8:70","sha256":"70:01:CE:F8:9D:67:13:DC:31:37:03:2C:22:AB:68:81:D6:DE:0C:E8:5F:F1:92:32:46:D8:04:E1:9A:38:2E:AD"}}},"request":{"raw":"GET /_next/static/chunks/994e0443052d40d3.js HTTP/1.1\r\nHost: marulabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://marulabet.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 11 Jan 2026 02:02:20 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Sat, 27 Dec 2025 18:15:14 GMT\r\netag: W/\"305b-19b61059350\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VWsSWtutzlelkhajfJ45%2FTObQmi4pOqRjNsaJtO3oV9pw5qbJni%2FQkvk8XD89vxxchPTb%2B6ZzCu17aaddqRRyTiW7VIyMuQNtbss\"}]}\r\ncf-ray: 9bc0d4d4c80956ae-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12379,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (12022)","md5":"ecc9ef49716204aa65181086e1f1ff48","sha1":"9e48321ca40da8e1902cdfc2cffe56797d963cd0","sha256":"cbbf85a3abfaadc9e6e6b2b90cc5343c4f4252a14a4f437d53dfd6195d6bc294","sha512":"e4b5d03b9311729b2d63354a7b4f4576de0fe99a11c5b039ff4804984ed33ecd130bd5cfd4df496e71b70a106a4d6e6b19bb40ae247c3ef9c434a501f46e57e7","ssdeep":"192:R/Xqyc6kCUtGkIj2/Q1LtCCNu3EQjgso0sp3q948eMW8oxYL9dHybLC9l9/gDUDw:R/6J+UtGktIUyP347aPqzy3Nwgdj","tlshash":"2a42e8e976e1fda3835a40d4843b5007f2681d72646ea0d4e3e9dcea3560d4e81f2f9a","first_seen":"2025-12-31T07:43:06.452914Z","last_seen":"2026-01-11T02:03:05.443411Z","times_seen":3,"resource_available":true,"data":null}},"time_used":87,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":81,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-11","alert":"Sinkholed","trigger":"marulabet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"marulabet.com/_next/static/chunks/a3f896b0b5ea4f01.js","fqdn":"marulabet.com","domain":"marulabet.com","tld":"com"},"ip":{"addr":"104.21.14.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://marulabet.com/","date":"2026-01-11T02:02:20.395Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"marulabet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Dec 2025 13:13:09 GMT","end":"Mon, 30 Mar 2026 14:11:58 GMT"},"fingerprint":{"sha1":"FA:EA:E7:29:47:4D:0C:8A:97:DE:34:6B:B0:73:EC:0F:02:FE:A8:70","sha256":"70:01:CE:F8:9D:67:13:DC:31:37:03:2C:22:AB:68:81:D6:DE:0C:E8:5F:F1:92:32:46:D8:04:E1:9A:38:2E:AD"}}},"request":{"raw":"GET /_next/static/chunks/a3f896b0b5ea4f01.js HTTP/1.1\r\nHost: marulabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://marulabet.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 11 Jan 2026 02:02:20 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Sat, 27 Dec 2025 18:15:15 GMT\r\netag: W/\"7cb6-19b61059738\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=n%2BP7S5gofp4dG9vPnXpcZlge4XBsM9Vl5EocFVfB6g7oOm6nyFSHjSUdEBzu%2FJScLbI1hjsmhvpDx8vItxz1J%2FS0vgLEOvgver56\"}]}\r\ncf-ray: 9bc0d4d4e81756ae-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":31926,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (20505)","md5":"af9251f2c8e814356249704034871a87","sha1":"7cd1c6ca54039fd70c6772744cc2de06729584fd","sha256":"fb82093a1b8348b84a8eb7eebf8a7b0f30a775ac3768aead6d6d41babb757ca4","sha512":"e56a318397bbf5ad507e261eb97b58b7541e520fa1fb5fbe7bee552965d7658d95cef8cb6cc081788065efde2d18a87e6cc8403171efe73483c3157f1b54b637","ssdeep":"384:M50CvTdvg21N+D9FU8ybtPESEBAUG92qah1lFe4EmkcO6QWhrRQ+lFlufAaZ+66H:M/FguNRbtPEfKsleYF8h96sX/0","tlshash":"35e2e76a3255f5473aeac0c19c2f0019a7246d35242ea03c77ec6ceaa552dc9f0b7f76","first_seen":"2026-01-11T01:55:53.472003Z","last_seen":"2026-01-11T02:03:05.444201Z","times_seen":2,"resource_available":false,"data":null}},"time_used":121,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":76,"receive":45,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-11","alert":"Sinkholed","trigger":"marulabet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"marulabet.com/_next/static/chunks/fd6696e9fe6e6566.js","fqdn":"marulabet.com","domain":"marulabet.com","tld":"com"},"ip":{"addr":"104.21.14.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://marulabet.com/","date":"2026-01-11T02:02:20.467Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"marulabet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Dec 2025 13:13:09 GMT","end":"Mon, 30 Mar 2026 14:11:58 GMT"},"fingerprint":{"sha1":"FA:EA:E7:29:47:4D:0C:8A:97:DE:34:6B:B0:73:EC:0F:02:FE:A8:70","sha256":"70:01:CE:F8:9D:67:13:DC:31:37:03:2C:22:AB:68:81:D6:DE:0C:E8:5F:F1:92:32:46:D8:04:E1:9A:38:2E:AD"}}},"request":{"raw":"GET /_next/static/chunks/fd6696e9fe6e6566.js HTTP/1.1\r\nHost: marulabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://marulabet.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 11 Jan 2026 02:02:20 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Tue, 06 Jan 2026 19:23:37 GMT\r\netag: W/\"bf40-19b94c3c6a8\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gzMj4Ydjqq8UZez5jdp5S%2Bo8n%2F0A0yT8Tb4auwMrIokYTMPSrVjR33RavbuM%2BWeqtuoRKVJrKsRWSb%2FXtOLnntRSLXBVYKnZZhs5\"}]}\r\ncf-ray: 9bc0d4d5484056ae-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":48960,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (48603)","md5":"a7ac644d45e9b9337866d1593b5a76ff","sha1":"a460ddc150af84d2a58c959d8bb8b7b64327414a","sha256":"5deed9620ff9d709b8859c696b6db3e4ca4307455f883c8ed4ea8f9fc2e12cc9","sha512":"638314e5a101ff4bb297e3c861d089988377cfe76a51228b9e613c1ae3eacbafdabfa59141bfcfc9026c2d3066f007021666df73892c0e2700c422268af64ea1","ssdeep":"768:tzT6nhuwgKu7uBwKDA5ApyRc3yP5uQW3qefRgKIqLKOJbNPTlw:tdwpuyBddyRcKobCMJZlw","tlshash":"d523d6606055a9fcb67704a9e07ec04c701ebe2cca0b8b68b6b87c7d5e154c47e86f97","first_seen":"2026-01-11T01:55:53.501152Z","last_seen":"2026-01-11T02:03:05.445343Z","times_seen":2,"resource_available":true,"data":null}},"time_used":92,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":73,"receive":19,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-11","alert":"Sinkholed","trigger":"marulabet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"marulabet.com/api/socket.io/?EIO=4\u0026transport=polling\u0026t=39o12sni\u0026sid=Ppq5ZA92h5AuiYkIAl0Q","fqdn":"marulabet.com","domain":"marulabet.com","tld":"com"},"ip":{"addr":"104.21.14.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://marulabet.com/","date":"2026-01-11T02:02:22.409Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"marulabet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Dec 2025 13:13:09 GMT","end":"Mon, 30 Mar 2026 14:11:58 GMT"},"fingerprint":{"sha1":"FA:EA:E7:29:47:4D:0C:8A:97:DE:34:6B:B0:73:EC:0F:02:FE:A8:70","sha256":"70:01:CE:F8:9D:67:13:DC:31:37:03:2C:22:AB:68:81:D6:DE:0C:E8:5F:F1:92:32:46:D8:04:E1:9A:38:2E:AD"}}},"request":{"raw":"POST /api/socket.io/?EIO=4\u0026transport=polling\u0026t=39o12sni\u0026sid=Ppq5ZA92h5AuiYkIAl0Q HTTP/1.1\r\nHost: marulabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAuthorization: undefined\r\nContent-type: text/plain;charset=UTF-8\r\nsentry-trace: 9ffef7b14fef40b3bd2e466e13219bb9-9b9b5ca029cfab0e-0\r\nbaggage: sentry-environment=production,sentry-release=web%402.7.0,sentry-public_key=6d319d1014d598ea4a0365923853ee67,sentry-trace_id=9ffef7b14fef40b3bd2e466e13219bb9,sentry-sampled=false,sentry-sample_rand=0.22013458521750728,sentry-sample_rate=0.1\r\nContent-Length: 2\r\nOrigin: https://marulabet.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://marulabet.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":2,"data":"40"}},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 11 Jan 2026 02:02:22 GMT\r\ncontent-type: text/html\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FAs39h3RrTo4qv6OKCNmVaFRSYchVS%2FjSbeMVOupvHKMoBXM50D3rx%2Fyu6iNAAvGw1l9%2FCQmIHBGIWwYRM0MxTEIdLQBKduqtB49\"}]}\r\npriority: u=3,i=?0\r\naccess-control-allow-origin: *\r\ncache-control: no-store\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9bc0d4e2087e56ae-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2,"size_decoded":0,"mime_type":"text/html","magic":"ASCII text, with no line terminators","md5":"444bcb3a3fcf8389296c49467f27e1d6","sha1":"7a85f4764bbd6daf1c3545efbbf0f279a6dc0beb","sha256":"2689367b205c16ce32ed4200942b8b8b1e262dfc70d9bc9fbc77c49699a4f1df","sha512":"9fbbbb5a0f329f9782e2356fa41d89cf9b3694327c1a934d6af2a9df2d7f936ce83717fb513196a4ce5548471708cd7134c2ae99b3c357bcabb2eafc7b9b7570","ssdeep":"","tlshash":"c710000000000000300000000000000000000000000000000000000000000c0000c000","first_seen":"2023-03-08T02:32:37Z","last_seen":"2026-08-05T14:03:55.485392Z","times_seen":445393,"resource_available":true,"data":null}},"time_used":83,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":83,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-11","alert":"Sinkholed","trigger":"marulabet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"marulabet.com/second-design/home/banner_blue.webp","fqdn":"marulabet.com","domain":"marulabet.com","tld":"com"},"ip":{"addr":"104.21.14.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://marulabet.com/","date":"2026-01-11T02:02:22.937Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"marulabet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Dec 2025 13:13:09 GMT","end":"Mon, 30 Mar 2026 14:11:58 GMT"},"fingerprint":{"sha1":"FA:EA:E7:29:47:4D:0C:8A:97:DE:34:6B:B0:73:EC:0F:02:FE:A8:70","sha256":"70:01:CE:F8:9D:67:13:DC:31:37:03:2C:22:AB:68:81:D6:DE:0C:E8:5F:F1:92:32:46:D8:04:E1:9A:38:2E:AD"}}},"request":{"raw":"GET /second-design/home/banner_blue.webp HTTP/1.1\r\nHost: marulabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://marulabet.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 11 Jan 2026 02:02:23 GMT\r\ncontent-type: image/webp\r\ncontent-length: 346328\r\npriority: u=4,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Sat, 27 Dec 2025 17:40:05 GMT\r\netag: W/\"548d8-19b60e56671\"\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XuUaS1CuK%2FH6%2FwfsJYx7hyeQt%2BxyLRtNtSDATbm2Z45dJoVs3obnm2d%2F%2Bz%2BiR7EFgRDIfB%2FrTuEdFSwKI201DNEgJN2%2F7ANBq%2FKO\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9bc0d4e5688c56ae-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":346328,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"258caeef71fa47f5e6268b4b1a0a6b03","sha1":"7d37eb51c4d5da68acce58237e7433d88ac177a1","sha256":"7cfefd291528ea7af2958e9725c412133c8e6ce380715b5e879e36306a133057","sha512":"68aeb1ec8ab4a1dd9c203b97571f263c0610d4d27da4674a7b98b85103c7a2c717a26a69057352b40edab1cee07f433803774b52e20463e638f118233d4f33e4","ssdeep":"6144:1bWZvyoqJ0Jf5KFuuBiYo+ytRpJqIU+Q13ZVAjGbq4AfuFeVizTHRykmOYVfOE/1:1SvyTJ0LKHBiLtcIPQBZVAjGbTAfuFef","tlshash":"6a742337eff90923b01d93edec8a1f81181fe8a64f15166e5ad2d65c143cd912806b9f","first_seen":"2025-03-15T18:38:34.509263Z","last_seen":"2026-02-19T17:02:28.815656Z","times_seen":80,"resource_available":false,"data":null}},"time_used":91,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":62,"receive":29,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-11","alert":"Sinkholed","trigger":"marulabet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"marulabet.com/_next/static/chunks/2c69dda28e67e57e.js","fqdn":"marulabet.com","domain":"marulabet.com","tld":"com"},"ip":{"addr":"104.21.14.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://marulabet.com/","date":"2026-01-11T02:02:20.438Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"marulabet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Dec 2025 13:13:09 GMT","end":"Mon, 30 Mar 2026 14:11:58 GMT"},"fingerprint":{"sha1":"FA:EA:E7:29:47:4D:0C:8A:97:DE:34:6B:B0:73:EC:0F:02:FE:A8:70","sha256":"70:01:CE:F8:9D:67:13:DC:31:37:03:2C:22:AB:68:81:D6:DE:0C:E8:5F:F1:92:32:46:D8:04:E1:9A:38:2E:AD"}}},"request":{"raw":"GET /_next/static/chunks/2c69dda28e67e57e.js HTTP/1.1\r\nHost: marulabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://marulabet.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 11 Jan 2026 02:02:20 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Tue, 06 Jan 2026 19:23:38 GMT\r\netag: W/\"90b-19b94c3ca90\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dpTFl8xqsJRcTgRVKV60of38iEjrxKNOKABXKS8qBxu%2BFlcUPtaRA6biO0zw%2BISOvf9%2Bm29Hd9Q%2F%2Bf7Vh%2Bw7lK6%2BiSUhLLvMsthG\"}]}\r\ncf-ray: 9bc0d4d5283256ae-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2315,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (1958)","md5":"33dc57bb9392fef432b1f5274e953108","sha1":"b98c3c6d5e93c3b768580b4dd7850384eaf61955","sha256":"6cfd34df21a22ff32f90c60f4b88b98523ade92b6a03432c4ba62b9b72701b97","sha512":"7020a27704c45175411e81c0bbb8b9c4d0dac262bf3cc8d29bde16361cc08e093d0ce2d6c4af51646777129a64c45a3618382b54e5bb80ae306cb53d1a92d945","ssdeep":"","tlshash":"b441a7d9a3507ab41cc82bf086730012618631bb72cb54b4c33989e0b6978d8e7e789b","first_seen":"2026-01-11T01:55:53.495242Z","last_seen":"2026-02-19T17:02:28.678451Z","times_seen":73,"resource_available":true,"data":null}},"time_used":70,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":65,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-11","alert":"Sinkholed","trigger":"marulabet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"marulabet.com/games_new_webp/evolution-emperor-sic-bo.webp","fqdn":"marulabet.com","domain":"marulabet.com","tld":"com"},"ip":{"addr":"104.21.14.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://marulabet.com/","date":"2026-01-11T02:02:23.807Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"marulabet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Dec 2025 13:13:09 GMT","end":"Mon, 30 Mar 2026 14:11:58 GMT"},"fingerprint":{"sha1":"FA:EA:E7:29:47:4D:0C:8A:97:DE:34:6B:B0:73:EC:0F:02:FE:A8:70","sha256":"70:01:CE:F8:9D:67:13:DC:31:37:03:2C:22:AB:68:81:D6:DE:0C:E8:5F:F1:92:32:46:D8:04:E1:9A:38:2E:AD"}}},"request":{"raw":"GET /games_new_webp/evolution-emperor-sic-bo.webp HTTP/1.1\r\nHost: marulabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://marulabet.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 11 Jan 2026 02:02:23 GMT\r\ncontent-type: image/webp\r\ncontent-length: 8746\r\npriority: u=4,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Thu, 01 Jan 2026 18:08:44 GMT\r\netag: W/\"222a-19b7abf6be0\"\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bVAwVElqfE698K2oIKk9xHFBwVPHXT3eH4IFZezQqqxm8M5F79xWq0r6jnv38QBHDcHTGkLP0LTInnOh4sXdSPXKZqlcSSvTZcqv\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9bc0d4eab8b956ae-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8746,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 180x236, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"f242f95e7e2a3201d9cdc899c8c798a0","sha1":"281b3b315a4f53fb9112d2e52f6b9dae987ce0f7","sha256":"9da15a436f3f5fdb7d29e1722c3e727dce3cfa88d18d404be2e00f6a6681f49b","sha512":"57ea78872016b57d64ce4f3aae478b3fc543374207e40e93a4a4e10222dd6556d89ceca1826cbedfc83d394fffbc3485a2d53dd7cd87891495e3b029572ebe35","ssdeep":"192:3Bzg0z6W81pXViY33Ifyn1erMG+1Es9yfktFcR5ldx+UdNZe:3K0OFniA3lnwrMesuktFcRv+UdO","tlshash":"3e02bf04efd125410274869128b085db31af99cca75e9a4e6f3c386cc308d3143b6e56","first_seen":"2026-01-11T02:03:05.450205Z","last_seen":"2026-01-11T02:03:05.450205Z","times_seen":1,"resource_available":false,"data":null}},"time_used":71,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":71,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-11","alert":"Sinkholed","trigger":"marulabet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"marulabet.com/privacy?_rsc=mg8e5","fqdn":"marulabet.com","domain":"marulabet.com","tld":"com"},"ip":{"addr":"104.21.14.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://marulabet.com/","date":"2026-01-11T02:02:24.483Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"marulabet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Dec 2025 13:13:09 GMT","end":"Mon, 30 Mar 2026 14:11:58 GMT"},"fingerprint":{"sha1":"FA:EA:E7:29:47:4D:0C:8A:97:DE:34:6B:B0:73:EC:0F:02:FE:A8:70","sha256":"70:01:CE:F8:9D:67:13:DC:31:37:03:2C:22:AB:68:81:D6:DE:0C:E8:5F:F1:92:32:46:D8:04:E1:9A:38:2E:AD"}}},"request":{"raw":"GET /privacy?_rsc=mg8e5 HTTP/1.1\r\nHost: marulabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://marulabet.com/\r\nrsc: 1\r\nnext-router-prefetch: 1\r\nnext-router-segment-prefetch: /!KHVzZXItc2lkZSk/$d$M/second-design/!KGhvbWUp/privacy/__PAGE__\r\nnext-url: /marulabet.com%26blue%26en/second-design\r\nsentry-trace: 9ffef7b14fef40b3bd2e466e13219bb9-92c044e091bb4221-0\r\nbaggage: sentry-environment=production,sentry-release=web%402.7.0,sentry-public_key=6d319d1014d598ea4a0365923853ee67,sentry-trace_id=9ffef7b14fef40b3bd2e466e13219bb9,sentry-sampled=false,sentry-sample_rand=0.22013458521750728,sentry-sample_rate=0.1\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 11 Jan 2026 02:02:24 GMT\r\ncontent-type: text/x-component\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nx-nextjs-rewritten-path: /marulabet.com\u0026blue\u0026en/second-design/privacy\r\nx-middleware-rewrite: /marulabet.com\u0026blue\u0026en/second-design/privacy?_rsc=mg8e5\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch, Accept-Encoding\r\nx-nextjs-cache: HIT\r\nx-nextjs-prerender: 1\r\nx-nextjs-postponed: 2\r\ncache-control: s-maxage=600, stale-while-revalidate=31535400\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9PcrAUbUg6mp17dB%2Fa6Yy5WmcLX7TxtpqrO6HKWO3Sxyo2VEp9xJP2ZO5YvltDktKVVg%2FGlRW6puYROgzJHKRPvGo2TaustNZC5O\"}]}\r\ncf-ray: 9bc0d4ef08e256ae-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":21194,"size_decoded":0,"mime_type":"text/x-component","magic":"Unicode text, UTF-8 text, with very long lines (4010)","md5":"7ede73ff3235248213d0cf51f257c62e","sha1":"a525156e9531978df972c758c971e095c52f87e6","sha256":"9dcb211f90f2b9953b516d52aa07e3e4da9a7dd7f0e4bbf9c3f6f41c29e43dba","sha512":"fb4591842b127a0e82aefed6bd748cef1baeb0d45ac1a9cddba0634e105a9c46d45e10dfa34d67ea5aa904f7e58a3be0e0402b1a0db7e221ae6f33a77f911f53","ssdeep":"384:jCqixz00CbG6de7ROEFgWS0BAXWTLmTUoTZGyWQt7Bf/9pfQIDBo747eGGw3XAQy:j8z01bfde7UEAz8offxB047ewn9xy","tlshash":"0d92c62ed708a7685bab01613a1fd2b5f72d4179a772ce7a69bcca1403465341f3b3c4","first_seen":"2026-01-11T02:03:05.451815Z","last_seen":"2026-01-11T02:03:05.451815Z","times_seen":1,"resource_available":false,"data":null}},"time_used":101,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":97,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-11","alert":"Sinkholed","trigger":"marulabet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"marulabet.com/about-us?_rsc=c32sh","fqdn":"marulabet.com","domain":"marulabet.com","tld":"com"},"ip":{"addr":"104.21.14.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://marulabet.com/","date":"2026-01-11T02:02:24.753Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"marulabet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Dec 2025 13:13:09 GMT","end":"Mon, 30 Mar 2026 14:11:58 GMT"},"fingerprint":{"sha1":"FA:EA:E7:29:47:4D:0C:8A:97:DE:34:6B:B0:73:EC:0F:02:FE:A8:70","sha256":"70:01:CE:F8:9D:67:13:DC:31:37:03:2C:22:AB:68:81:D6:DE:0C:E8:5F:F1:92:32:46:D8:04:E1:9A:38:2E:AD"}}},"request":{"raw":"GET /about-us?_rsc=c32sh HTTP/1.1\r\nHost: marulabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://marulabet.com/\r\nrsc: 1\r\nnext-router-prefetch: 1\r\nnext-router-segment-prefetch: /!KHVzZXItc2lkZSk/$d$M/second-design/!KGhvbWUp/about-us/__PAGE__\r\nnext-url: /marulabet.com%26blue%26en/second-design\r\nsentry-trace: 9ffef7b14fef40b3bd2e466e13219bb9-a0b098bfaa5eb176-0\r\nbaggage: sentry-environment=production,sentry-release=web%402.7.0,sentry-public_key=6d319d1014d598ea4a0365923853ee67,sentry-trace_id=9ffef7b14fef40b3bd2e466e13219bb9,sentry-sampled=false,sentry-sample_rand=0.22013458521750728,sentry-sample_rate=0.1\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 11 Jan 2026 02:02:24 GMT\r\ncontent-type: text/x-component\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nx-nextjs-rewritten-path: /marulabet.com\u0026blue\u0026en/second-design/about-us\r\nx-middleware-rewrite: /marulabet.com\u0026blue\u0026en/second-design/about-us?_rsc=c32sh\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch, Accept-Encoding\r\nx-nextjs-cache: HIT\r\nx-nextjs-prerender: 1\r\nx-nextjs-postponed: 2\r\ncache-control: s-maxage=600, stale-while-revalidate=31535400\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BCToXmSWdxW56jCXxNpQfl0TNdJ77EvISSPZXhEHGRFuzNkra9bDy5arofYhA6RuRPBil0bmEYYSyCAFyiS1xGq549BCVOiAHNU%2F\"}]}\r\ncf-ray: 9bc0d4f0b8f456ae-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":19758,"size_decoded":0,"mime_type":"text/x-component","magic":"ASCII text, with very long lines (4172)","md5":"3c5d7c7cd8a17e7ff986492210e12c6e","sha1":"bdfa79173b40dd11c53a8795775c85f3ec79d541","sha256":"4235270d67522d742b61dfc079ab4e0e85fba2904de706688b48a970d13b657a","sha512":"99fc1786b27091dc695a75f2df35ad056df2d53b12ed54e9846851d433edbc2af0a7239810a7929b7dc48eb3efdc11d3578e74c24d800eca8bc25506c7b363bf","ssdeep":"384:jCgQRSqJNpfMFEBgcXBqi8KUAwF76R80d:jlqJNpfMFEBgcXBqi8KUV76R80d","tlshash":"749203399706eeecaa3b4065142ed32aa31d8a77d796cf75e2fc9e6003460742e573c4","first_seen":"2026-01-11T02:03:05.453243Z","last_seen":"2026-01-11T02:03:05.453243Z","times_seen":1,"resource_available":false,"data":null}},"time_used":97,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":91,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-11","alert":"Sinkholed","trigger":"marulabet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"marulabet.com/vip?_rsc=ir4n9","fqdn":"marulabet.com","domain":"marulabet.com","tld":"com"},"ip":{"addr":"104.21.14.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://marulabet.com/","date":"2026-01-11T02:02:24.834Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"marulabet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Dec 2025 13:13:09 GMT","end":"Mon, 30 Mar 2026 14:11:58 GMT"},"fingerprint":{"sha1":"FA:EA:E7:29:47:4D:0C:8A:97:DE:34:6B:B0:73:EC:0F:02:FE:A8:70","sha256":"70:01:CE:F8:9D:67:13:DC:31:37:03:2C:22:AB:68:81:D6:DE:0C:E8:5F:F1:92:32:46:D8:04:E1:9A:38:2E:AD"}}},"request":{"raw":"GET /vip?_rsc=ir4n9 HTTP/1.1\r\nHost: marulabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://marulabet.com/\r\nrsc: 1\r\nnext-router-prefetch: 1\r\nnext-router-segment-prefetch: /!KHVzZXItc2lkZSk/$d$M/second-design/!KGhvbWUp/vip\r\nnext-url: /marulabet.com%26blue%26en/second-design\r\nsentry-trace: 9ffef7b14fef40b3bd2e466e13219bb9-a69d9d68a2bfd198-0\r\nbaggage: sentry-environment=production,sentry-release=web%402.7.0,sentry-public_key=6d319d1014d598ea4a0365923853ee67,sentry-trace_id=9ffef7b14fef40b3bd2e466e13219bb9,sentry-sampled=false,sentry-sample_rand=0.22013458521750728,sentry-sample_rate=0.1\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 11 Jan 2026 02:02:24 GMT\r\ncontent-type: text/x-component\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nx-nextjs-rewritten-path: /marulabet.com\u0026blue\u0026en/second-design/vip\r\nx-middleware-rewrite: /marulabet.com\u0026blue\u0026en/second-design/vip?_rsc=ir4n9\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch, Accept-Encoding\r\nx-nextjs-cache: HIT\r\nx-nextjs-prerender: 1\r\nx-nextjs-postponed: 2\r\ncache-control: s-maxage=600, stale-while-revalidate=31535400\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=daqZohLCARRhi8DtMof7Dtsy1tsHRTTaRIIsShEcVJi3sPspk4C6mw%2BrLhy7gJut9JQGWRM3fAuez6luR0RNkl6FOKu35BnEbPU3\"}]}\r\ncf-ray: 9bc0d4f138f856ae-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":520,"size_decoded":0,"mime_type":"text/x-component","magic":"ASCII text","md5":"cae286cc5150ca9e140002b466382032","sha1":"808cbc33e587c522661c3a71f7c9a2f4593ee43c","sha256":"9349b2186e1004b44bee7c066fdd6957343d7d566c713868881e88769e334aa7","sha512":"b1c732329240455085c84a12e473d8986e5fe1abc1fcf0e71e30fe2312ae09bc31d5e4c37944b3427ae36b99e276ee07fdb591a051fc9b39959ce970274a3b7e","ssdeep":"","tlshash":"1af027a3d40dee291d3dcc8c0e5e6363855d8c7fdab12ab992acce6c068513a1b496c0","first_seen":"2026-01-11T01:55:53.415353Z","last_seen":"2026-01-11T02:03:05.218009Z","times_seen":2,"resource_available":false,"data":null}},"time_used":100,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":100,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-11","alert":"Sinkholed","trigger":"marulabet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"marulabet.com/group/live?_rsc=1jkk3","fqdn":"marulabet.com","domain":"marulabet.com","tld":"com"},"ip":{"addr":"104.21.14.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://marulabet.com/","date":"2026-01-11T02:02:25.213Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"marulabet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Dec 2025 13:13:09 GMT","end":"Mon, 30 Mar 2026 14:11:58 GMT"},"fingerprint":{"sha1":"FA:EA:E7:29:47:4D:0C:8A:97:DE:34:6B:B0:73:EC:0F:02:FE:A8:70","sha256":"70:01:CE:F8:9D:67:13:DC:31:37:03:2C:22:AB:68:81:D6:DE:0C:E8:5F:F1:92:32:46:D8:04:E1:9A:38:2E:AD"}}},"request":{"raw":"GET /group/live?_rsc=1jkk3 HTTP/1.1\r\nHost: marulabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://marulabet.com/\r\nrsc: 1\r\nnext-router-prefetch: 1\r\nnext-router-segment-prefetch: /_head\r\nnext-url: /marulabet.com%26blue%26en/second-design\r\nsentry-trace: 9ffef7b14fef40b3bd2e466e13219bb9-85cb84d45d130983-0\r\nbaggage: sentry-environment=production,sentry-release=web%402.7.0,sentry-public_key=6d319d1014d598ea4a0365923853ee67,sentry-trace_id=9ffef7b14fef40b3bd2e466e13219bb9,sentry-sampled=false,sentry-sample_rand=0.22013458521750728,sentry-sample_rate=0.1\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 11 Jan 2026 02:02:25 GMT\r\ncontent-type: text/x-component\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nx-nextjs-rewritten-path: /marulabet.com\u0026blue\u0026en/second-design/group/live\r\nx-middleware-rewrite: /marulabet.com\u0026blue\u0026en/second-design/group/live?_rsc=1jkk3\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch, Accept-Encoding\r\nx-nextjs-cache: HIT\r\nx-nextjs-prerender: 1\r\nx-nextjs-postponed: 2\r\ncache-control: s-maxage=600, stale-while-revalidate=31535400\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=OQ7xtn001%2FTjeg8MyKyyccx07gZEGafHN%2FoebYYAotmm04VBRg9h0F%2FkhL7Lf49mVJKIs%2Bh6i7BtfMGFVg%2BIvMefiw9YzAPmFGE0\"}]}\r\ncf-ray: 9bc0d4f3990e56ae-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1965,"size_decoded":0,"mime_type":"text/x-component","magic":"ASCII text, with very long lines (1444)","md5":"6c421767d164700bb202c9c9dc5a75f1","sha1":"3307eee16bcd0354b14a8bc46fe024d0cfa83dc8","sha256":"1bde8df6c6a1bdd59c977fe118261690fa64a378821417905e1f73dc387b07a4","sha512":"da5bff3cd87a9f3e0299e5382e754348a6ae99f592871f64568466c98ff9a5a02dfcad92dcce2da0a0da9f42d2d0612d95ab29e1815cc95b53a6e4a04ad84467","ssdeep":"","tlshash":"f2410f7a880cec8e5a67c959086ff31a160d1677c6701e7adaaccd0e19c602e5f60f90","first_seen":"2026-01-11T02:03:05.226237Z","last_seen":"2026-01-11T02:03:05.226237Z","times_seen":1,"resource_available":false,"data":null}},"time_used":87,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":87,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-11","alert":"Sinkholed","trigger":"marulabet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"marulabet.com/_next/static/chunks/210b0f662d5bb4bf.js","fqdn":"marulabet.com","domain":"marulabet.com","tld":"com"},"ip":{"addr":"104.21.14.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://marulabet.com/","date":"2026-01-11T02:02:20.396Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"marulabet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Dec 2025 13:13:09 GMT","end":"Mon, 30 Mar 2026 14:11:58 GMT"},"fingerprint":{"sha1":"FA:EA:E7:29:47:4D:0C:8A:97:DE:34:6B:B0:73:EC:0F:02:FE:A8:70","sha256":"70:01:CE:F8:9D:67:13:DC:31:37:03:2C:22:AB:68:81:D6:DE:0C:E8:5F:F1:92:32:46:D8:04:E1:9A:38:2E:AD"}}},"request":{"raw":"GET /_next/static/chunks/210b0f662d5bb4bf.js HTTP/1.1\r\nHost: marulabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://marulabet.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 11 Jan 2026 02:02:20 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Sat, 27 Dec 2025 18:15:16 GMT\r\netag: W/\"7fd1-19b61059b20\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Zy3nCkOumiYLDYA9iW4Mowp9wvuhmlHcS4tpQbk6MsRc2Ww4fEeSu48PkdNClVumqhnPwayUnEd61Z3PoRrI%2BXl33hzMqTe65Eg%2B\"}]}\r\ncf-ray: 9bc0d4d4e81856ae-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":32721,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (32364)","md5":"05a7d671c0c96730e5b712daa8d1f926","sha1":"d40bb3d29cb9e32d15199361b3fbf294cbb17490","sha256":"f3042df1a96124b7db6c261bdc29bca58c447dd39faf75f41e60a10723289dcf","sha512":"55d17d0fc8446edb1cb477df1666e5d6fce01cdda0bea83e4541aeade52cc916f5d4b107e20dd3da1de18c30a9f4dcd42a8c7dcf0c40e866609ac65fbec0efb7","ssdeep":"768:h+Ew9Nf6J8yy7n1lb0+YRZE7jl1/ufS0bp6/iHI:UEw9NXyyTbMRZE7jl1/ufS0bp6/D","tlshash":"abe219b43704b475d6ef52ced0274808633d2726a00f4574b17e8cad2629ee5b1e7b7a","first_seen":"2026-01-11T01:55:53.455941Z","last_seen":"2026-01-11T02:03:05.454438Z","times_seen":2,"resource_available":false,"data":null}},"time_used":120,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":76,"receive":44,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-11","alert":"Sinkholed","trigger":"marulabet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"marulabet.com/_next/static/chunks/c99dd6f2193578ac.js","fqdn":"marulabet.com","domain":"marulabet.com","tld":"com"},"ip":{"addr":"104.21.14.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://marulabet.com/","date":"2026-01-11T02:02:20.398Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"marulabet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Dec 2025 13:13:09 GMT","end":"Mon, 30 Mar 2026 14:11:58 GMT"},"fingerprint":{"sha1":"FA:EA:E7:29:47:4D:0C:8A:97:DE:34:6B:B0:73:EC:0F:02:FE:A8:70","sha256":"70:01:CE:F8:9D:67:13:DC:31:37:03:2C:22:AB:68:81:D6:DE:0C:E8:5F:F1:92:32:46:D8:04:E1:9A:38:2E:AD"}}},"request":{"raw":"GET /_next/static/chunks/c99dd6f2193578ac.js HTTP/1.1\r\nHost: marulabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://marulabet.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 11 Jan 2026 02:02:20 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Sat, 27 Dec 2025 18:15:14 GMT\r\netag: W/\"5e51-19b61059350\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0gPPXFuIDDcwVoy0OZBhpPYdw7%2FSm3FxMXCI%2BZwF16rlzh8bHpVdqy05fdPclWUcyw8W8fNEdEjcDw9rpz9roubLETDdqHgUvWLk\"}]}\r\ncf-ray: 9bc0d4d4e81956ae-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":24145,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (23788)","md5":"5eabe5602d90013fa15f85a6fc6f890a","sha1":"2312e373488bdcd197a5189f2d76f272fb825fb8","sha256":"815a58522bb2f49c1bce5d54f1aec6e5c9c4fc41979d178e73397fdf65be846b","sha512":"e6d61874e6296af415a21d9c062c2657b051412569585b0aef4f2179d2d603fe640df9d8fe39b66a404d803fca621bf673ff3fe9d7ddd6cfb92a5f50852a4f6c","ssdeep":"384:N3+WOa/L3dxIv57SwaJAHTMYGeDFp3TXLvA3oLgxINGug/LecP+nZYr+gbYchU9R:IeOTMYGe5hjvN3IecGnernGmQFUM","tlshash":"92b2e9d9b361b06b53ab61da403f0405e2fea974251d096ce754d4c3b8b8ea990f7f38","first_seen":"2026-01-11T01:55:53.456823Z","last_seen":"2026-02-19T17:02:28.729415Z","times_seen":73,"resource_available":true,"data":null}},"time_used":116,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":79,"receive":37,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-11","alert":"Sinkholed","trigger":"marulabet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"marulabet.com/_next/static/chunks/699d240ba76ab6e7.js","fqdn":"marulabet.com","domain":"marulabet.com","tld":"com"},"ip":{"addr":"104.21.14.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://marulabet.com/","date":"2026-01-11T02:02:20.411Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"marulabet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Dec 2025 13:13:09 GMT","end":"Mon, 30 Mar 2026 14:11:58 GMT"},"fingerprint":{"sha1":"FA:EA:E7:29:47:4D:0C:8A:97:DE:34:6B:B0:73:EC:0F:02:FE:A8:70","sha256":"70:01:CE:F8:9D:67:13:DC:31:37:03:2C:22:AB:68:81:D6:DE:0C:E8:5F:F1:92:32:46:D8:04:E1:9A:38:2E:AD"}}},"request":{"raw":"GET /_next/static/chunks/699d240ba76ab6e7.js HTTP/1.1\r\nHost: marulabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://marulabet.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 11 Jan 2026 02:02:20 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Sat, 27 Dec 2025 18:15:15 GMT\r\netag: W/\"9feb-19b61059738\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yz%2BVTrGNYRgPfWYGjxHYUO%2BiDsZ7PoaGj%2B79vHNlfacnwAgXGDK2rlJOFFLSXh%2BddvWLwD%2BXnylliKbBKElSR0AeLQictbyaLZrI\"}]}\r\ncf-ray: 9bc0d4d4f82156ae-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":40939,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (40582)","md5":"fb3634cf9dbe461ce7b21964ef674642","sha1":"5be5159bc385567dce6e3ac8a821c4628079c72b","sha256":"4ef0b88dfe9e08a67e8361b199e7c5c0267fb4b0ec83ade00c6ca9d55f131d58","sha512":"a512adef8a10ff7d93d6fee4920da94225ddc9f03872b0b2d991ba8ed14cb6b136ebc6382dd9924f7a1c84f8b6a98ecba6dea9e484f774878da9fd576d27336d","ssdeep":"384:CeEJQfhNlOuEi1z9J9TvpiIuy7A7QKGwpRCSNBcAoU8bs541hAblbH36AxVeNyYi:CSN6y8QKGwamoUh541U9XarEqM3","tlshash":"8a03e9c5b320606243d651a384b50203f329a999540a455cbb7ceeffa97cec971f6f72","first_seen":"2026-01-11T01:55:53.435896Z","last_seen":"2026-02-19T17:02:28.60695Z","times_seen":73,"resource_available":true,"data":null}},"time_used":118,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":77,"receive":41,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-11","alert":"Sinkholed","trigger":"marulabet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"marulabet.com/_next/static/chunks/eee013d4993c1ed0.js","fqdn":"marulabet.com","domain":"marulabet.com","tld":"com"},"ip":{"addr":"104.21.14.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://marulabet.com/","date":"2026-01-11T02:02:20.412Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"marulabet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Dec 2025 13:13:09 GMT","end":"Mon, 30 Mar 2026 14:11:58 GMT"},"fingerprint":{"sha1":"FA:EA:E7:29:47:4D:0C:8A:97:DE:34:6B:B0:73:EC:0F:02:FE:A8:70","sha256":"70:01:CE:F8:9D:67:13:DC:31:37:03:2C:22:AB:68:81:D6:DE:0C:E8:5F:F1:92:32:46:D8:04:E1:9A:38:2E:AD"}}},"request":{"raw":"GET /_next/static/chunks/eee013d4993c1ed0.js HTTP/1.1\r\nHost: marulabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://marulabet.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 11 Jan 2026 02:02:20 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Sat, 03 Jan 2026 18:08:43 GMT\r\netag: W/\"620e-19b850c1ff8\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DmkzwSS%2FhUo07M7QoiYbZ1bZMls1lRuHIbi5SMhQZD9h3%2FCaV%2FSWyaJnRoDAWx9KfaPrS1nCIJFSm6UVV1ex8xQf7fgOfewo2yf1\"}]}\r\ncf-ray: 9bc0d4d4f82256ae-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":25102,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (24745)","md5":"864f184b964f45fcf781703f93b51157","sha1":"f008a220eb2b14e86031eb77560f3902027db3fb","sha256":"99dbdeb1ae3bb2bf5f05d8e6aaa85790a532fa0ac803f50600d8c3709dadc509","sha512":"8190b73c41e24999f19c7657ff073ba2478153e5ece2f9a4c38d3784722727ab894d934025112f3c40977546eeb28ac7aaa06495a6e828078d96495fa9899f8c","ssdeep":"384:AvujK1iTCMsJ9oWuniaoJQdmAmQvSezeFXkdJfWn0MfzO4uE7gj+WHGENcWB9YdL:AvMCJ9oWuniaoJQdmAmQvSecnAv62veJ","tlshash":"59b2e8bc32117411db8710a9c0ef4d06e12e65b6220e8465b2be9caf25b5cdd50bbb7f","first_seen":"2026-01-11T01:55:53.571028Z","last_seen":"2026-01-11T02:03:05.459015Z","times_seen":2,"resource_available":true,"data":null}},"time_used":112,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":78,"receive":34,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-11","alert":"Sinkholed","trigger":"marulabet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"marulabet.com/api/socket.io/?EIO=4\u0026transport=polling\u0026t=39oum6cg\u0026sid=Ppq5ZA92h5AuiYkIAl0Q","fqdn":"marulabet.com","domain":"marulabet.com","tld":"com"},"ip":{"addr":"104.21.14.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://marulabet.com/","date":"2026-01-11T02:02:23.382Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"marulabet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Dec 2025 13:13:09 GMT","end":"Mon, 30 Mar 2026 14:11:58 GMT"},"fingerprint":{"sha1":"FA:EA:E7:29:47:4D:0C:8A:97:DE:34:6B:B0:73:EC:0F:02:FE:A8:70","sha256":"70:01:CE:F8:9D:67:13:DC:31:37:03:2C:22:AB:68:81:D6:DE:0C:E8:5F:F1:92:32:46:D8:04:E1:9A:38:2E:AD"}}},"request":{"raw":"POST /api/socket.io/?EIO=4\u0026transport=polling\u0026t=39oum6cg\u0026sid=Ppq5ZA92h5AuiYkIAl0Q HTTP/1.1\r\nHost: marulabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAuthorization: undefined\r\nContent-type: text/plain;charset=UTF-8\r\nsentry-trace: 9ffef7b14fef40b3bd2e466e13219bb9-934612f19b342d3e-0\r\nbaggage: sentry-environment=production,sentry-release=web%402.7.0,sentry-public_key=6d319d1014d598ea4a0365923853ee67,sentry-trace_id=9ffef7b14fef40b3bd2e466e13219bb9,sentry-sampled=false,sentry-sample_rand=0.22013458521750728,sentry-sample_rate=0.1\r\nContent-Length: 88\r\nOrigin: https://marulabet.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://marulabet.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":88,"data":"42[\"lastWinsNewOpen:all\"]\u001e42[\"lastWinsNewOpen:highWins\"]\u001e42[\"lastWinsNewOpen:luckyWins\"]"}},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 11 Jan 2026 02:02:23 GMT\r\ncontent-type: text/html\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kVrn1ubm9s%2BZdfjQtItrKrjyciIlAfCruGptwmcRXZZt%2BzX3hsCWD8MaUP7Xxmiwq0WXXunaYwKr%2FnPf%2FfgqpL5Xbsoomn3mgp%2Fg\"}]}\r\npriority: u=3,i=?0\r\naccess-control-allow-origin: *\r\ncache-control: no-store\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9bc0d4e8289b56ae-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2,"size_decoded":0,"mime_type":"text/html","magic":"ASCII text, with no line terminators","md5":"444bcb3a3fcf8389296c49467f27e1d6","sha1":"7a85f4764bbd6daf1c3545efbbf0f279a6dc0beb","sha256":"2689367b205c16ce32ed4200942b8b8b1e262dfc70d9bc9fbc77c49699a4f1df","sha512":"9fbbbb5a0f329f9782e2356fa41d89cf9b3694327c1a934d6af2a9df2d7f936ce83717fb513196a4ce5548471708cd7134c2ae99b3c357bcabb2eafc7b9b7570","ssdeep":"","tlshash":"c710000000000000300000000000000000000000000000000000000000000c0000c000","first_seen":"2023-03-08T02:32:37Z","last_seen":"2026-08-05T14:03:55.485392Z","times_seen":445393,"resource_available":true,"data":null}},"time_used":83,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":83,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-11","alert":"Sinkholed","trigger":"marulabet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"marulabet.com/second-design/ranks/gold3.webp","fqdn":"marulabet.com","domain":"marulabet.com","tld":"com"},"ip":{"addr":"104.21.14.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://marulabet.com/","date":"2026-01-11T02:02:23.799Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"marulabet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Dec 2025 13:13:09 GMT","end":"Mon, 30 Mar 2026 14:11:58 GMT"},"fingerprint":{"sha1":"FA:EA:E7:29:47:4D:0C:8A:97:DE:34:6B:B0:73:EC:0F:02:FE:A8:70","sha256":"70:01:CE:F8:9D:67:13:DC:31:37:03:2C:22:AB:68:81:D6:DE:0C:E8:5F:F1:92:32:46:D8:04:E1:9A:38:2E:AD"}}},"request":{"raw":"GET /second-design/ranks/gold3.webp HTTP/1.1\r\nHost: marulabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://marulabet.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 11 Jan 2026 02:02:23 GMT\r\ncontent-type: image/webp\r\ncontent-length: 6180\r\npriority: u=4,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Sat, 09 Nov 2024 04:17:25 GMT\r\netag: W/\"1824-1930f241c08\"\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8E9rZiDc3WUzUOG6gjvY58WIRVRsZhRQsfufWIXdZKeO4FayuwHfu5nxs3lePzC1mvfhMiLMyK6uSn1ftIjcyvEEUl0PVT063ezn\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9bc0d4eaa8b456ae-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6180,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"1b3b6925c68588a11877b4994c793345","sha1":"360d0a1cfe4930a8160ce69d30441a37bf0d56a8","sha256":"9359737daba5e683c10d20dbd81bb7b441ae5af9c138f085aec6da5539be9788","sha512":"751d244e5eccd6c6805f9b268fe435bf81381335371c92ee68e25d6ddedd0293c33a6b09589cc849d291cb5922ae2cbd3ce58cf15a137624faf9a93c23f3518f","ssdeep":"192:sCDeuxFQkAd+vAGo+KXl4R//v2NiqIvhrBR:sc5eC2xKRoIvhf","tlshash":"9fd19ef9a15ed1f5b6abf40e8438517b6f8fe8fc56516c0c49180364f24e275b444837","first_seen":"2026-01-11T01:55:53.553476Z","last_seen":"2026-02-19T17:02:28.870783Z","times_seen":41,"resource_available":false,"data":null}},"time_used":63,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":62,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-11","alert":"Sinkholed","trigger":"marulabet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"marulabet.com/blog?_rsc=1jkk3","fqdn":"marulabet.com","domain":"marulabet.com","tld":"com"},"ip":{"addr":"104.21.14.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://marulabet.com/","date":"2026-01-11T02:02:24.604Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"marulabet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Dec 2025 13:13:09 GMT","end":"Mon, 30 Mar 2026 14:11:58 GMT"},"fingerprint":{"sha1":"FA:EA:E7:29:47:4D:0C:8A:97:DE:34:6B:B0:73:EC:0F:02:FE:A8:70","sha256":"70:01:CE:F8:9D:67:13:DC:31:37:03:2C:22:AB:68:81:D6:DE:0C:E8:5F:F1:92:32:46:D8:04:E1:9A:38:2E:AD"}}},"request":{"raw":"GET /blog?_rsc=1jkk3 HTTP/1.1\r\nHost: marulabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://marulabet.com/\r\nrsc: 1\r\nnext-router-prefetch: 1\r\nnext-router-segment-prefetch: /_head\r\nnext-url: /marulabet.com%26blue%26en/second-design\r\nsentry-trace: 9ffef7b14fef40b3bd2e466e13219bb9-a04456579c00107e-0\r\nbaggage: sentry-environment=production,sentry-release=web%402.7.0,sentry-public_key=6d319d1014d598ea4a0365923853ee67,sentry-trace_id=9ffef7b14fef40b3bd2e466e13219bb9,sentry-sampled=false,sentry-sample_rand=0.22013458521750728,sentry-sample_rate=0.1\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 11 Jan 2026 02:02:24 GMT\r\ncontent-type: text/x-component\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nx-nextjs-rewritten-path: /marulabet.com\u0026blue\u0026en/second-design/blog\r\nx-middleware-rewrite: /marulabet.com\u0026blue\u0026en/second-design/blog?_rsc=1jkk3\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch, Accept-Encoding\r\nx-nextjs-cache: HIT\r\nx-nextjs-prerender: 1\r\nx-nextjs-postponed: 2\r\ncache-control: s-maxage=600, stale-while-revalidate=31535400\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=b%2Ba7vyNdC4NyMjUMXfJgTowUR95Y0DMkPgl271BXkJKpK9AC9SM5zTCfhe7p71xayDdFkfMUQ%2BjftN00RNtJ6VO7484Ggrp1ZC4y\"}]}\r\ncf-ray: 9bc0d4efc8ee56ae-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1965,"size_decoded":0,"mime_type":"text/x-component","magic":"ASCII text, with very long lines (1444)","md5":"6c421767d164700bb202c9c9dc5a75f1","sha1":"3307eee16bcd0354b14a8bc46fe024d0cfa83dc8","sha256":"1bde8df6c6a1bdd59c977fe118261690fa64a378821417905e1f73dc387b07a4","sha512":"da5bff3cd87a9f3e0299e5382e754348a6ae99f592871f64568466c98ff9a5a02dfcad92dcce2da0a0da9f42d2d0612d95ab29e1815cc95b53a6e4a04ad84467","ssdeep":"","tlshash":"f2410f7a880cec8e5a67c959086ff31a160d1677c6701e7adaaccd0e19c602e5f60f90","first_seen":"2026-01-11T02:03:05.226237Z","last_seen":"2026-01-11T02:03:05.226237Z","times_seen":1,"resource_available":false,"data":null}},"time_used":92,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":92,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-11","alert":"Sinkholed","trigger":"marulabet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"marulabet.com/_next/static/chunks/a4aca8c1a0878363.js","fqdn":"marulabet.com","domain":"marulabet.com","tld":"com"},"ip":{"addr":"104.21.14.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://marulabet.com/","date":"2026-01-11T02:02:20.377Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"marulabet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Dec 2025 13:13:09 GMT","end":"Mon, 30 Mar 2026 14:11:58 GMT"},"fingerprint":{"sha1":"FA:EA:E7:29:47:4D:0C:8A:97:DE:34:6B:B0:73:EC:0F:02:FE:A8:70","sha256":"70:01:CE:F8:9D:67:13:DC:31:37:03:2C:22:AB:68:81:D6:DE:0C:E8:5F:F1:92:32:46:D8:04:E1:9A:38:2E:AD"}}},"request":{"raw":"GET /_next/static/chunks/a4aca8c1a0878363.js HTTP/1.1\r\nHost: marulabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://marulabet.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 11 Jan 2026 02:02:20 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Sat, 27 Dec 2025 18:15:15 GMT\r\netag: W/\"1b39b-19b61059738\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=p3QBiECJqJrIiAKNjIXtZo1UoGdww0Ri5L4UeJlRLxK6bFpQYjsJwbAjalN%2F94gEuBYuaK5tlBE%2F6oJnm5cD5m6rCtRF0pRMZ744\"}]}\r\ncf-ray: 9bc0d4d4d80c56ae-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":111515,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"5fbc11e10b58feaaf2b0ae7a8b2a76f1","sha1":"bd3d2ba3efb38b2c5dcb6d88755281b056eb9a72","sha256":"16ca85aad9ed0a2160ca4d285103dffcefbbbf5ed4789708b0e7a3413cda5388","sha512":"a8861f9f5687f4558dddbc4c02fd354cdf11e7d9b47f2a844584b21e1417e2d1a03602f6875e9bb3019d71cea1c4bad86907fcb434b4f0498656c4c5ef0f5e7a","ssdeep":"1536:eN29IxBQi6ha/rqj4gUnFZSul2PmOot685D:e5P6M2jDRuPn6+","tlshash":"09b3f7f935d5f48207ab40a6c03f0006f32c4d37189e68a0a3e5ddda756499de1b3faa","first_seen":"2025-12-31T07:43:06.427962Z","last_seen":"2026-01-11T02:03:05.462845Z","times_seen":3,"resource_available":true,"data":null}},"time_used":153,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":77,"receive":76,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-11","alert":"Sinkholed","trigger":"marulabet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"marulabet.com/vip?_rsc=r54j0","fqdn":"marulabet.com","domain":"marulabet.com","tld":"com"},"ip":{"addr":"104.21.14.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://marulabet.com/","date":"2026-01-11T02:02:22.428Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"marulabet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Dec 2025 13:13:09 GMT","end":"Mon, 30 Mar 2026 14:11:58 GMT"},"fingerprint":{"sha1":"FA:EA:E7:29:47:4D:0C:8A:97:DE:34:6B:B0:73:EC:0F:02:FE:A8:70","sha256":"70:01:CE:F8:9D:67:13:DC:31:37:03:2C:22:AB:68:81:D6:DE:0C:E8:5F:F1:92:32:46:D8:04:E1:9A:38:2E:AD"}}},"request":{"raw":"GET /vip?_rsc=r54j0 HTTP/1.1\r\nHost: marulabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://marulabet.com/\r\nrsc: 1\r\nnext-router-prefetch: 1\r\nnext-router-segment-prefetch: /_tree\r\nnext-url: /marulabet.com%26blue%26en/second-design\r\nsentry-trace: 9ffef7b14fef40b3bd2e466e13219bb9-af45747af6fa64b8-0\r\nbaggage: sentry-environment=production,sentry-release=web%402.7.0,sentry-public_key=6d319d1014d598ea4a0365923853ee67,sentry-trace_id=9ffef7b14fef40b3bd2e466e13219bb9,sentry-sampled=false,sentry-sample_rand=0.22013458521750728,sentry-sample_rate=0.1\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 11 Jan 2026 02:02:22 GMT\r\ncontent-type: text/x-component\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nx-nextjs-rewritten-path: /marulabet.com\u0026blue\u0026en/second-design/vip\r\nx-middleware-rewrite: /marulabet.com\u0026blue\u0026en/second-design/vip?_rsc=r54j0\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch, Accept-Encoding\r\nx-nextjs-cache: HIT\r\nx-nextjs-prerender: 1\r\nx-nextjs-postponed: 2\r\ncache-control: s-maxage=600, stale-while-revalidate=31535400\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1NoWxNVOUxR0j96tHTnc%2FaYakFmzO%2F4Ds3IrZ%2BvHJaYl67jLMjI3%2BMt6vmo4Xql1YxRJc1GesgZe%2FW%2B2bZ14MRJ3XOnHtdvgeg%2BG\"}]}\r\ncf-ray: 9bc0d4e2388156ae-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2451,"size_decoded":0,"mime_type":"text/x-component","magic":"ASCII text, with very long lines (942)","md5":"817b012bf718b9923711db545ea4dd78","sha1":"306639aade7e193e5702b677e4a3b124304a3a31","sha256":"d9d32ee0ab3287b92350ceaee4f1932723e84994deeae642fdf82c7634cc7f4a","sha512":"7426e425bba92b93e4864e05b00b5e889bffef5e30347592914017c4673e5c66dc808cf0100a1c60e6e89eac0a4458569bea84c868a9337c7102513ab2802676","ssdeep":"","tlshash":"6f519e0cc8499db498d9d59d61d5d7016658af3bf1b88dace04bdc64038f03d0beab87","first_seen":"2026-01-11T02:03:05.46347Z","last_seen":"2026-01-11T02:03:05.46347Z","times_seen":1,"resource_available":false,"data":null}},"time_used":142,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":142,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-11","alert":"Sinkholed","trigger":"marulabet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"marulabet.com/api/socket.io/?EIO=4\u0026transport=polling\u0026t=39oqrjq5\u0026sid=Ppq5ZA92h5AuiYkIAl0Q","fqdn":"marulabet.com","domain":"marulabet.com","tld":"com"},"ip":{"addr":"104.21.14.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://marulabet.com/","date":"2026-01-11T02:02:23.239Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"marulabet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Dec 2025 13:13:09 GMT","end":"Mon, 30 Mar 2026 14:11:58 GMT"},"fingerprint":{"sha1":"FA:EA:E7:29:47:4D:0C:8A:97:DE:34:6B:B0:73:EC:0F:02:FE:A8:70","sha256":"70:01:CE:F8:9D:67:13:DC:31:37:03:2C:22:AB:68:81:D6:DE:0C:E8:5F:F1:92:32:46:D8:04:E1:9A:38:2E:AD"}}},"request":{"raw":"GET /api/socket.io/?EIO=4\u0026transport=polling\u0026t=39oqrjq5\u0026sid=Ppq5ZA92h5AuiYkIAl0Q HTTP/1.1\r\nHost: marulabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAuthorization: undefined\r\nsentry-trace: 9ffef7b14fef40b3bd2e466e13219bb9-b4ef52096a2d0aee-0\r\nbaggage: sentry-environment=production,sentry-release=web%402.7.0,sentry-public_key=6d319d1014d598ea4a0365923853ee67,sentry-trace_id=9ffef7b14fef40b3bd2e466e13219bb9,sentry-sampled=false,sentry-sample_rand=0.22013458521750728,sentry-sample_rate=0.1\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://marulabet.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 11 Jan 2026 02:02:23 GMT\r\ncontent-type: text/plain; charset=UTF-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8q248sCiacoI1Xd%2B%2Fxns8ZOh7eNUxueC2MIAkeIfMExgI1rXntDVwpftow4oQc5FBdI1SskyKUefSRCtyhM90bFGRF26%2Bih%2B0KL0\"}]}\r\npriority: u=3,i=?0\r\naccess-control-allow-origin: *\r\ncache-control: no-store\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9bc0d4e7489156ae-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1,"size_decoded":0,"mime_type":"text/plain; charset=UTF-8","magic":"very short file (no magic)","md5":"1679091c5a880faf6fb5e6087eb1b2dc","sha1":"c1dfd96eea8cc2b62785275bca38ac261256e278","sha256":"e7f6c011776e8db7cd330b54174fd76f7d0216b612387a5ffcfb81e6f0919683","sha512":"3c9ad55147a7144f6067327c3b82ea70e7c5426add9ceea4d07dc2902239bf9e049b88625eb65d014a7718f79354608cab0921782c643f0208983fffa3582e40","ssdeep":"","tlshash":"c700000000030000c00000300000000000000000000c00000000000000000000000000","first_seen":"2023-03-07T01:10:09Z","last_seen":"2026-08-05T08:11:04.946165Z","times_seen":12036,"resource_available":true,"data":null}},"time_used":304,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":304,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-11","alert":"Sinkholed","trigger":"marulabet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"marulabet.com/second-design/home/promo2.webp","fqdn":"marulabet.com","domain":"marulabet.com","tld":"com"},"ip":{"addr":"104.21.14.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://marulabet.com/","date":"2026-01-11T02:02:23.369Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"marulabet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Dec 2025 13:13:09 GMT","end":"Mon, 30 Mar 2026 14:11:58 GMT"},"fingerprint":{"sha1":"FA:EA:E7:29:47:4D:0C:8A:97:DE:34:6B:B0:73:EC:0F:02:FE:A8:70","sha256":"70:01:CE:F8:9D:67:13:DC:31:37:03:2C:22:AB:68:81:D6:DE:0C:E8:5F:F1:92:32:46:D8:04:E1:9A:38:2E:AD"}}},"request":{"raw":"GET /second-design/home/promo2.webp HTTP/1.1\r\nHost: marulabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://marulabet.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 11 Jan 2026 02:02:23 GMT\r\ncontent-type: image/webp\r\ncontent-length: 7574\r\npriority: u=4,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Thu, 01 Jan 2026 21:01:33 GMT\r\netag: W/\"1d96-19b7b5da3c8\"\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6hVdA%2BkbtVcCLwmD5xC0JSH%2BYHNo%2BB8vfkvKU%2Byd6tLEFWTy2duKhRi92g2iCACMdD%2B4ayMjJ1r36J84FkM3vZy1q3aCw3irM%2BLG\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9bc0d4e8189656ae-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7574,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"b3539038ae01db5382d54a6c94823d21","sha1":"a9932b694e2b9a4111043fb5c72af4da83d71ac4","sha256":"db04cc3d02cdf2846d24379ba9dff05f55bd367222be7ba31e5708adf7eb8141","sha512":"189bda25bf1a096b42a402efc0cfa2d6d53caa3ee850fa2d9ac939bad17e2cd9cb1e9039011a5e66081fa5ce1c9e82318c2e22eebdac349e8c629fa3461678f7","ssdeep":"96:88NtxuyL0zqjkZRMK+UmtCPbSMRPHM0EWuQbaCvwZkLHFAP8jLeG5J3wLHH0:PN8ujSRQUASVCWuMvwCTFosZgo","tlshash":"f5f1c0720a6d0a7f7a0b4df142c9fe92d107788527a99d451d479fd081e55de07e042b","first_seen":"2026-01-11T01:55:53.552654Z","last_seen":"2026-02-19T17:02:28.854451Z","times_seen":73,"resource_available":false,"data":null}},"time_used":62,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":62,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-11","alert":"Sinkholed","trigger":"marulabet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"marulabet.com/games_new_webp/pragmatic-play-zombie-carnival.webp","fqdn":"marulabet.com","domain":"marulabet.com","tld":"com"},"ip":{"addr":"104.21.14.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://marulabet.com/","date":"2026-01-11T02:02:23.742Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"marulabet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Dec 2025 13:13:09 GMT","end":"Mon, 30 Mar 2026 14:11:58 GMT"},"fingerprint":{"sha1":"FA:EA:E7:29:47:4D:0C:8A:97:DE:34:6B:B0:73:EC:0F:02:FE:A8:70","sha256":"70:01:CE:F8:9D:67:13:DC:31:37:03:2C:22:AB:68:81:D6:DE:0C:E8:5F:F1:92:32:46:D8:04:E1:9A:38:2E:AD"}}},"request":{"raw":"GET /games_new_webp/pragmatic-play-zombie-carnival.webp HTTP/1.1\r\nHost: marulabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://marulabet.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 11 Jan 2026 02:02:23 GMT\r\ncontent-type: image/webp\r\ncontent-length: 46940\r\npriority: u=4,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Thu, 01 Jan 2026 18:08:35 GMT\r\netag: W/\"b75c-19b7abf48b8\"\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=daQtlJaxNNWFIHrIlELqTdQ9RAOG61ZNPbg%2FQOzb9QVWEBY1loogPO1HuNAzmvwikSPQEPPPX9F2kIwcH5s7ywK1jEoJhyfdlosC\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9bc0d4ea58a456ae-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":46940,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"55d829f502df6201fbe1359d84ee462b","sha1":"078beaf33506a3bb2f89fd55320043cbad493052","sha256":"60dfddf688220bfbf726924e90a4f718801255908b3f8e9fade9862cbd0345ab","sha512":"680c19b2516b2fa0a6bdbc4b1c4f710190350a69a868eae3760f02b5dea34bed69708e3537c5645227d8aeaeabae53d6845dc7dcf1f8ec84a2dd1554523f8de3","ssdeep":"768:gFgCHb/x2giPzdB26blbTaoaeUXRBUP3Q/x7fq1gWxAUD4T+tDgNrU:ub/Wz9TaPNkP3mx7fq1flu+srU","tlshash":"c823e116a152a304ed087eb42be4aa56b27f0fc0dfc4518d7d9d8bd61f60569853c1f3","first_seen":"2026-01-11T02:03:05.471402Z","last_seen":"2026-02-02T04:25:23.305916Z","times_seen":2,"resource_available":false,"data":null}},"time_used":61,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":54,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-11","alert":"Sinkholed","trigger":"marulabet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"marulabet.com/about-us?_rsc=1u1lu","fqdn":"marulabet.com","domain":"marulabet.com","tld":"com"},"ip":{"addr":"104.21.14.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://marulabet.com/","date":"2026-01-11T02:02:24.734Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"marulabet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Dec 2025 13:13:09 GMT","end":"Mon, 30 Mar 2026 14:11:58 GMT"},"fingerprint":{"sha1":"FA:EA:E7:29:47:4D:0C:8A:97:DE:34:6B:B0:73:EC:0F:02:FE:A8:70","sha256":"70:01:CE:F8:9D:67:13:DC:31:37:03:2C:22:AB:68:81:D6:DE:0C:E8:5F:F1:92:32:46:D8:04:E1:9A:38:2E:AD"}}},"request":{"raw":"GET /about-us?_rsc=1u1lu HTTP/1.1\r\nHost: marulabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://marulabet.com/\r\nrsc: 1\r\nnext-router-prefetch: 1\r\nnext-router-segment-prefetch: /!KHVzZXItc2lkZSk/$d$M/second-design/!KGhvbWUp/about-us\r\nnext-url: /marulabet.com%26blue%26en/second-design\r\nsentry-trace: 9ffef7b14fef40b3bd2e466e13219bb9-85918a2a39575d52-0\r\nbaggage: sentry-environment=production,sentry-release=web%402.7.0,sentry-public_key=6d319d1014d598ea4a0365923853ee67,sentry-trace_id=9ffef7b14fef40b3bd2e466e13219bb9,sentry-sampled=false,sentry-sample_rand=0.22013458521750728,sentry-sample_rate=0.1\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 11 Jan 2026 02:02:24 GMT\r\ncontent-type: text/x-component\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nx-nextjs-rewritten-path: /marulabet.com\u0026blue\u0026en/second-design/about-us\r\nx-middleware-rewrite: /marulabet.com\u0026blue\u0026en/second-design/about-us?_rsc=1u1lu\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch, Accept-Encoding\r\nx-nextjs-cache: HIT\r\nx-nextjs-prerender: 1\r\nx-nextjs-postponed: 2\r\ncache-control: s-maxage=600, stale-while-revalidate=31535400\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2d64cB8TRZyF18aBU7VuMTaKHwTWWwAFSoPGUPBYR9M9O0qwIwael64AzAkYpN1lmnXOY63hCdWDwHEl3%2BFV7wRODSrDevA0rVQx\"}]}\r\ncf-ray: 9bc0d4f098f256ae-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":520,"size_decoded":0,"mime_type":"text/x-component","magic":"ASCII text","md5":"cae286cc5150ca9e140002b466382032","sha1":"808cbc33e587c522661c3a71f7c9a2f4593ee43c","sha256":"9349b2186e1004b44bee7c066fdd6957343d7d566c713868881e88769e334aa7","sha512":"b1c732329240455085c84a12e473d8986e5fe1abc1fcf0e71e30fe2312ae09bc31d5e4c37944b3427ae36b99e276ee07fdb591a051fc9b39959ce970274a3b7e","ssdeep":"","tlshash":"1af027a3d40dee291d3dcc8c0e5e6363855d8c7fdab12ab992acce6c068513a1b496c0","first_seen":"2026-01-11T01:55:53.415353Z","last_seen":"2026-01-11T02:03:05.218009Z","times_seen":2,"resource_available":false,"data":null}},"time_used":92,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":92,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-11","alert":"Sinkholed","trigger":"marulabet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"marulabet.com/_next/static/chunks/eff55acea53ec0ed.css","fqdn":"marulabet.com","domain":"marulabet.com","tld":"com"},"ip":{"addr":"104.21.14.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://marulabet.com/","date":"2026-01-11T02:02:20.363Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"marulabet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Dec 2025 13:13:09 GMT","end":"Mon, 30 Mar 2026 14:11:58 GMT"},"fingerprint":{"sha1":"FA:EA:E7:29:47:4D:0C:8A:97:DE:34:6B:B0:73:EC:0F:02:FE:A8:70","sha256":"70:01:CE:F8:9D:67:13:DC:31:37:03:2C:22:AB:68:81:D6:DE:0C:E8:5F:F1:92:32:46:D8:04:E1:9A:38:2E:AD"}}},"request":{"raw":"GET /_next/static/chunks/eff55acea53ec0ed.css HTTP/1.1\r\nHost: marulabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://marulabet.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 11 Jan 2026 02:02:20 GMT\r\ncontent-type: text/css; charset=UTF-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RiCxjfcxn8zhZ6gAkDIsFuIyAEiIFPum5bwKZxiKRTz36JXyZ5M8YpZxu63zKnkMj1gUjFVp55SGy3L5nKEt5Fs%2BHj66P1Wy7F0l\"}]}\r\npriority: u=2,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: br\r\nlast-modified: Thu, 25 Dec 2025 20:49:33 GMT\r\netag: W/\"53-19b57462348\"\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9bc0d4d4b80456ae-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":83,"size_decoded":0,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text","md5":"765bf9d3ef8ff10be0cad5b6d4e3daaa","sha1":"aa1b4bc7fcf48c46eae19700dd7509519aa0ba85","sha256":"f403a5500f2dcd2ecf20ed8f0d77487d89495c3d3789182da4975fe7db6e6559","sha512":"8da6091440e8422a6931d64239ad83324f260ae3fceb164b1f20954db67764ad5425cc19d1ec48870932e42f9e70c21349f9ea3179ae77bf8d8c1ac547289915","ssdeep":"","tlshash":"cea012804541f754e5d148f3d0ce2110888c4718019485e421541de0980742c1372f4c","first_seen":"2025-12-31T07:43:06.46324Z","last_seen":"2026-04-17T17:22:40.725573Z","times_seen":109,"resource_available":false,"data":null}},"time_used":87,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":87,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-11","alert":"Sinkholed","trigger":"marulabet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"marulabet.com/_next/static/chunks/9060994daf3b8615.css","fqdn":"marulabet.com","domain":"marulabet.com","tld":"com"},"ip":{"addr":"104.21.14.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://marulabet.com/","date":"2026-01-11T02:02:20.364Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"marulabet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Dec 2025 13:13:09 GMT","end":"Mon, 30 Mar 2026 14:11:58 GMT"},"fingerprint":{"sha1":"FA:EA:E7:29:47:4D:0C:8A:97:DE:34:6B:B0:73:EC:0F:02:FE:A8:70","sha256":"70:01:CE:F8:9D:67:13:DC:31:37:03:2C:22:AB:68:81:D6:DE:0C:E8:5F:F1:92:32:46:D8:04:E1:9A:38:2E:AD"}}},"request":{"raw":"GET /_next/static/chunks/9060994daf3b8615.css HTTP/1.1\r\nHost: marulabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://marulabet.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 11 Jan 2026 02:02:20 GMT\r\ncontent-type: text/css; charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Wed, 07 Jan 2026 17:32:52 GMT\r\netag: W/\"512af-19b9984bda0\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=b%2FcK4EekHMMOYYYcY6Vg5VxZypp0g%2Fb%2FhUszaR9Pk5eXONE4ApoahwN412MfWUvzlM%2BMusS8DuU3RavCUdc%2FQfQICwNT8PEPnhxk\"}]}\r\ncf-ray: 9bc0d4d4c80556ae-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":332463,"size_decoded":0,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"f029a56763747aa10159d040a69c169b","sha1":"aad2e155b1f40849851608517e7df7fd4c18ce65","sha256":"a65a073388716e6bd2dd56c3b56f451d234177da248accfaf60196b8e442bd32","sha512":"792d9900b3257ce78c3ca336383d60828fcc03f359296eedf0cbd5f9d348f452f761b457b456376e00a66ab6c5a3d27c9be28fc4308a352e6094ff11596a53ea","ssdeep":"6144:Po0DL+pazxc/6x3jchVC8cxIwBo6+CER1NGdROr1WJWVgGL/SZaHZRo5knUb1zX7:K5RlCjl","tlshash":"3464b391b519d1bb7e2ba8fd638cf8dcc108f082de764ba9f951922423c37f36961614","first_seen":"2026-01-11T01:55:53.416965Z","last_seen":"2026-01-11T02:03:05.474097Z","times_seen":2,"resource_available":false,"data":null}},"time_used":173,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":85,"receive":88,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-11","alert":"Sinkholed","trigger":"marulabet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"marulabet.com/_next/static/chunks/b699731cda0020b4.js","fqdn":"marulabet.com","domain":"marulabet.com","tld":"com"},"ip":{"addr":"104.21.14.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://marulabet.com/","date":"2026-01-11T02:02:20.413Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"marulabet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Dec 2025 13:13:09 GMT","end":"Mon, 30 Mar 2026 14:11:58 GMT"},"fingerprint":{"sha1":"FA:EA:E7:29:47:4D:0C:8A:97:DE:34:6B:B0:73:EC:0F:02:FE:A8:70","sha256":"70:01:CE:F8:9D:67:13:DC:31:37:03:2C:22:AB:68:81:D6:DE:0C:E8:5F:F1:92:32:46:D8:04:E1:9A:38:2E:AD"}}},"request":{"raw":"GET /_next/static/chunks/b699731cda0020b4.js HTTP/1.1\r\nHost: marulabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://marulabet.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 11 Jan 2026 02:02:20 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Sat, 27 Dec 2025 18:15:15 GMT\r\netag: W/\"3bc9-19b61059738\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=AjzDvkBb%2B04EIR7gvtDHcJ1ODjewmw2EC4cE7hhLKr4kyFdXpAygQnuFa6w2ZPqvTGUbA1kQhKIbuqdakg3v2z1MWZ%2B254JE95kz\"}]}\r\ncf-ray: 9bc0d4d4f82356ae-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15305,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (14948)","md5":"40440d0a26afb7694208aaa1124c32ae","sha1":"92e8a42be6d633c2e1600636ad212c413efc6dad","sha256":"5e5beddff18019122661132c259f1c8997d53a8136edaf8eff390948b963c9fb","sha512":"81a7ea351def4c29eebe87171688734b80801a7e40786a86a551687cd6bf81530a7f543c9fbc1fb6f4b42a857fa970238926bbcc24ada2c6b2b2d7389d2b0e08","ssdeep":"192:OqB5qeZR31Jm74v1o0n+K8jvZnSGQpXeXcBorSncmMcRD1o26Ss1RviE8VSTtrSF:Ooq8RhKnjvhm/p467EIa3XDoOar","tlshash":"ba62f7e576d2f071a3ba1ae6d03f0056f2691db4240d1010f369e4f9397489a86e7f7a","first_seen":"2026-01-11T01:55:53.572093Z","last_seen":"2026-02-19T17:02:28.75444Z","times_seen":73,"resource_available":true,"data":null}},"time_used":94,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":65,"receive":29,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-11","alert":"Sinkholed","trigger":"marulabet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"marulabet.com/icons/coinsIcons/xrp.svg","fqdn":"marulabet.com","domain":"marulabet.com","tld":"com"},"ip":{"addr":"104.21.14.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://marulabet.com/","date":"2026-01-11T02:02:21.005Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"marulabet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Dec 2025 13:13:09 GMT","end":"Mon, 30 Mar 2026 14:11:58 GMT"},"fingerprint":{"sha1":"FA:EA:E7:29:47:4D:0C:8A:97:DE:34:6B:B0:73:EC:0F:02:FE:A8:70","sha256":"70:01:CE:F8:9D:67:13:DC:31:37:03:2C:22:AB:68:81:D6:DE:0C:E8:5F:F1:92:32:46:D8:04:E1:9A:38:2E:AD"}}},"request":{"raw":"GET /icons/coinsIcons/xrp.svg HTTP/1.1\r\nHost: marulabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://marulabet.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 11 Jan 2026 02:02:21 GMT\r\ncontent-type: image/svg+xml\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kZMfAhlyqgnM5ANgSwUrV7U97bDbGNtb2LLJU2iKQXwo0NpRVq9UJieB943SVP2N9H4e7im%2BEKuNb5saW1XQn1LQ%2B6gxEbOL8TJO\"}]}\r\npriority: u=4,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: br\r\nlast-modified: Sat, 27 Dec 2025 17:40:04 GMT\r\netag: W/\"3d5-19b60e56435\"\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9bc0d4d9285056ae-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":981,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"7fc9715a0c84ebdf7b2b8fa419ec73c7","sha1":"8456dd697a6d4be6824ddb930c8711b8fd03e520","sha256":"f318f23a304126891d0ec1c72638c0b3f10c6e35b96c7d5b6a160050c8868fc3","sha512":"5774f2f8feddf088b4cda143341bc643e1b9485f1051a59ecaafc6542bce5b2f1aa7805f3564b6b244d13b331558871f885a9fe3650bf004c95b26b092c77360","ssdeep":"","tlshash":"4311edcdfb665db9dd44d311f52621e82747e0f69b48c228aba14728b8d8c23dc01a54","first_seen":"2026-01-11T01:55:53.479385Z","last_seen":"2026-05-31T04:22:22.378756Z","times_seen":4,"resource_available":false,"data":null}},"time_used":55,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":55,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-11","alert":"Sinkholed","trigger":"marulabet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"marulabet.com/terms?_rsc=r54j0","fqdn":"marulabet.com","domain":"marulabet.com","tld":"com"},"ip":{"addr":"104.21.14.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://marulabet.com/","date":"2026-01-11T02:02:22.068Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"marulabet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Dec 2025 13:13:09 GMT","end":"Mon, 30 Mar 2026 14:11:58 GMT"},"fingerprint":{"sha1":"FA:EA:E7:29:47:4D:0C:8A:97:DE:34:6B:B0:73:EC:0F:02:FE:A8:70","sha256":"70:01:CE:F8:9D:67:13:DC:31:37:03:2C:22:AB:68:81:D6:DE:0C:E8:5F:F1:92:32:46:D8:04:E1:9A:38:2E:AD"}}},"request":{"raw":"GET /terms?_rsc=r54j0 HTTP/1.1\r\nHost: marulabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://marulabet.com/\r\nrsc: 1\r\nnext-router-prefetch: 1\r\nnext-router-segment-prefetch: /_tree\r\nnext-url: /marulabet.com%26blue%26en/second-design\r\nsentry-trace: 9ffef7b14fef40b3bd2e466e13219bb9-8c26033fc4ec739a-0\r\nbaggage: sentry-environment=production,sentry-release=web%402.7.0,sentry-public_key=6d319d1014d598ea4a0365923853ee67,sentry-trace_id=9ffef7b14fef40b3bd2e466e13219bb9,sentry-sampled=false,sentry-sample_rand=0.22013458521750728,sentry-sample_rate=0.1\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 11 Jan 2026 02:02:22 GMT\r\ncontent-type: text/x-component\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nx-nextjs-rewritten-path: /marulabet.com\u0026blue\u0026en/second-design/terms\r\nx-middleware-rewrite: /marulabet.com\u0026blue\u0026en/second-design/terms?_rsc=r54j0\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch, Accept-Encoding\r\nx-nextjs-cache: STALE\r\nx-nextjs-prerender: 1\r\nx-nextjs-postponed: 2\r\ncache-control: s-maxage=600, stale-while-revalidate=31535400\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=px%2Fu2BIF9HVJM9W77WlcLRvGhEotqzNVm%2FfALHJqxxph7GuX%2FY2ghSMzM1B%2FqmH2XYQWu1re4TfG5eZPaQ7VvJqqm4luB7zMBfd1\"}]}\r\ncf-ray: 9bc0d4dfe87356ae-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2455,"size_decoded":0,"mime_type":"text/x-component","magic":"ASCII text, with very long lines (946)","md5":"ed70dc983acb2c0bfb8beb257c5b344b","sha1":"33b3e3931658689afc77874b6b34a5c79f69d03f","sha256":"daacd5d5be8efa1d1b7743cdd16234cfca30f8a8b10863cbfee1dec0711c2052","sha512":"f6d7cb1afa53f4126b40c54156e9d74ce6f490886db85e9af05625d5b382f34ded41aa249d41c571e9879b036200939088fe040c632bfa20923e865b1c42b0f3","ssdeep":"","tlshash":"64519e0cc8499db498c9d59961d5d7016658af3bf1b88dace04bdc64138f03d0beab87","first_seen":"2026-01-11T02:03:05.477984Z","last_seen":"2026-01-11T02:03:05.477984Z","times_seen":1,"resource_available":false,"data":null}},"time_used":192,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":192,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-11","alert":"Sinkholed","trigger":"marulabet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"marulabet.com/games_new_webp/dice.webp","fqdn":"marulabet.com","domain":"marulabet.com","tld":"com"},"ip":{"addr":"104.21.14.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://marulabet.com/","date":"2026-01-11T02:02:22.486Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"marulabet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Dec 2025 13:13:09 GMT","end":"Mon, 30 Mar 2026 14:11:58 GMT"},"fingerprint":{"sha1":"FA:EA:E7:29:47:4D:0C:8A:97:DE:34:6B:B0:73:EC:0F:02:FE:A8:70","sha256":"70:01:CE:F8:9D:67:13:DC:31:37:03:2C:22:AB:68:81:D6:DE:0C:E8:5F:F1:92:32:46:D8:04:E1:9A:38:2E:AD"}}},"request":{"raw":"GET /games_new_webp/dice.webp HTTP/1.1\r\nHost: marulabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://marulabet.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 11 Jan 2026 02:02:22 GMT\r\ncontent-type: image/webp\r\ncontent-length: 2390\r\npriority: u=4,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Thu, 01 Jan 2026 18:08:14 GMT\r\netag: W/\"956-19b7abef6b0\"\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nQdB44GaOVq1Q6qe4mjG%2FPDcTZ%2FguGXLZOCyYklrK7qNSxiT8h03FbkuqaT1%2Fjn%2B2NdlXsahH%2Bygkk%2BNRKgKVADZaPMhcTotC4TT\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9bc0d4e2988556ae-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2390,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 208x257, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"4321a3197f1ab9457ef1edc8cb638de2","sha1":"b1eccd479b3023229103fe120e8527ddc765bb7d","sha256":"26b05e23fbd6963544e3f01f738a630cb4deb0aa7bf94462805c3d95a22d95d2","sha512":"fbf76854f7d7af55aff499175825cb1cecefcbacea89da3e7dd6556e850dd7a9486a006857293641db3eeeabe5ee5102e98130fe3f16a9f62484e4c3d90e0cf1","ssdeep":"","tlshash":"53416d04d1a1d7a450eab19c4229de634ec7d491f54463403f8fbebcc92154210eeede","first_seen":"2026-01-11T01:55:53.45306Z","last_seen":"2026-02-19T17:02:28.672387Z","times_seen":73,"resource_available":false,"data":null}},"time_used":61,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":61,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-11","alert":"Sinkholed","trigger":"marulabet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"marulabet.com/second-design/home/promo3.webp","fqdn":"marulabet.com","domain":"marulabet.com","tld":"com"},"ip":{"addr":"104.21.14.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://marulabet.com/","date":"2026-01-11T02:02:23.371Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"marulabet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Dec 2025 13:13:09 GMT","end":"Mon, 30 Mar 2026 14:11:58 GMT"},"fingerprint":{"sha1":"FA:EA:E7:29:47:4D:0C:8A:97:DE:34:6B:B0:73:EC:0F:02:FE:A8:70","sha256":"70:01:CE:F8:9D:67:13:DC:31:37:03:2C:22:AB:68:81:D6:DE:0C:E8:5F:F1:92:32:46:D8:04:E1:9A:38:2E:AD"}}},"request":{"raw":"GET /second-design/home/promo3.webp HTTP/1.1\r\nHost: marulabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://marulabet.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 11 Jan 2026 02:02:23 GMT\r\ncontent-type: image/webp\r\ncontent-length: 7782\r\npriority: u=4,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Thu, 01 Jan 2026 21:01:33 GMT\r\netag: W/\"1e66-19b7b5da3c8\"\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7CBPDGX9vyHkV5iQGzbQ7q0G47eCYXOOGS9Ou7m2op%2FM5WLqs9Of7766aODGPWHSmCVg6nENWE3haDfbFg%2BxaxmkQNOKsDnSitkY\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9bc0d4e8189756ae-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7782,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"ede4c081b4631f67918ea29b84df3ebb","sha1":"419615db1061840c37e5bc5bf4081947bd5148bd","sha256":"33b256735e64989f6fcd5d28bf295e6e6d47ece66be5b9a43a96074166d74a78","sha512":"8b15972f0e61d08d22fe0dd6be6ac61b42f39d96a6f620ab8c85df5040f636f738bc9313c8614387020be54106d78fd715410ffe63db26f748b68ed3edf80e2c","ssdeep":"192:jRgHZlmBzag9JWBreRAFQZBSRyU3LZvjE:jRBzagqdyPSEU3FE","tlshash":"43f1ae7c0696320e81a9c82159f0b0fd0a993607cb42435cddecbacf2e99f4851c1216","first_seen":"2026-01-11T01:55:53.533126Z","last_seen":"2026-02-19T17:02:28.691621Z","times_seen":73,"resource_available":false,"data":null}},"time_used":66,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":65,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-11","alert":"Sinkholed","trigger":"marulabet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"marulabet.com/reviews?_rsc=rxnc1","fqdn":"marulabet.com","domain":"marulabet.com","tld":"com"},"ip":{"addr":"104.21.14.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://marulabet.com/","date":"2026-01-11T02:02:24.324Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"marulabet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Dec 2025 13:13:09 GMT","end":"Mon, 30 Mar 2026 14:11:58 GMT"},"fingerprint":{"sha1":"FA:EA:E7:29:47:4D:0C:8A:97:DE:34:6B:B0:73:EC:0F:02:FE:A8:70","sha256":"70:01:CE:F8:9D:67:13:DC:31:37:03:2C:22:AB:68:81:D6:DE:0C:E8:5F:F1:92:32:46:D8:04:E1:9A:38:2E:AD"}}},"request":{"raw":"GET /reviews?_rsc=rxnc1 HTTP/1.1\r\nHost: marulabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://marulabet.com/\r\nrsc: 1\r\nnext-router-prefetch: 1\r\nnext-router-segment-prefetch: /!KHVzZXItc2lkZSk/$d$M/second-design/!KGhvbWUp/reviews\r\nnext-url: /marulabet.com%26blue%26en/second-design\r\nsentry-trace: 9ffef7b14fef40b3bd2e466e13219bb9-865c68a4d06c73cb-0\r\nbaggage: sentry-environment=production,sentry-release=web%402.7.0,sentry-public_key=6d319d1014d598ea4a0365923853ee67,sentry-trace_id=9ffef7b14fef40b3bd2e466e13219bb9,sentry-sampled=false,sentry-sample_rand=0.22013458521750728,sentry-sample_rate=0.1\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 11 Jan 2026 02:02:24 GMT\r\ncontent-type: text/x-component\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nx-nextjs-rewritten-path: /marulabet.com\u0026blue\u0026en/second-design/reviews\r\nx-middleware-rewrite: /marulabet.com\u0026blue\u0026en/second-design/reviews?_rsc=rxnc1\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch, Accept-Encoding\r\nx-nextjs-cache: HIT\r\nx-nextjs-prerender: 1\r\nx-nextjs-postponed: 2\r\ncache-control: s-maxage=600, stale-while-revalidate=31535400\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jFyzKysKAmM1G%2FLI%2FX7b9UYHWLAP%2Fnna0tNjqPzVZ89WTzFsglWy1XylxRBEgDke3YKUAzb8BA1VZlf4we5ZFUxx%2FI3wJuMuiinY\"}]}\r\ncf-ray: 9bc0d4ee08d656ae-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":520,"size_decoded":0,"mime_type":"text/x-component","magic":"ASCII text","md5":"cae286cc5150ca9e140002b466382032","sha1":"808cbc33e587c522661c3a71f7c9a2f4593ee43c","sha256":"9349b2186e1004b44bee7c066fdd6957343d7d566c713868881e88769e334aa7","sha512":"b1c732329240455085c84a12e473d8986e5fe1abc1fcf0e71e30fe2312ae09bc31d5e4c37944b3427ae36b99e276ee07fdb591a051fc9b39959ce970274a3b7e","ssdeep":"","tlshash":"1af027a3d40dee291d3dcc8c0e5e6363855d8c7fdab12ab992acce6c068513a1b496c0","first_seen":"2026-01-11T01:55:53.415353Z","last_seen":"2026-01-11T02:03:05.218009Z","times_seen":2,"resource_available":false,"data":null}},"time_used":96,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":96,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-11","alert":"Sinkholed","trigger":"marulabet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"marulabet.com/privacy?_rsc=r54j0","fqdn":"marulabet.com","domain":"marulabet.com","tld":"com"},"ip":{"addr":"104.21.14.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://marulabet.com/","date":"2026-01-11T02:02:22.065Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"marulabet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Dec 2025 13:13:09 GMT","end":"Mon, 30 Mar 2026 14:11:58 GMT"},"fingerprint":{"sha1":"FA:EA:E7:29:47:4D:0C:8A:97:DE:34:6B:B0:73:EC:0F:02:FE:A8:70","sha256":"70:01:CE:F8:9D:67:13:DC:31:37:03:2C:22:AB:68:81:D6:DE:0C:E8:5F:F1:92:32:46:D8:04:E1:9A:38:2E:AD"}}},"request":{"raw":"GET /privacy?_rsc=r54j0 HTTP/1.1\r\nHost: marulabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://marulabet.com/\r\nrsc: 1\r\nnext-router-prefetch: 1\r\nnext-router-segment-prefetch: /_tree\r\nnext-url: /marulabet.com%26blue%26en/second-design\r\nsentry-trace: 9ffef7b14fef40b3bd2e466e13219bb9-b2de3306f362a251-0\r\nbaggage: sentry-environment=production,sentry-release=web%402.7.0,sentry-public_key=6d319d1014d598ea4a0365923853ee67,sentry-trace_id=9ffef7b14fef40b3bd2e466e13219bb9,sentry-sampled=false,sentry-sample_rand=0.22013458521750728,sentry-sample_rate=0.1\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 11 Jan 2026 02:02:22 GMT\r\ncontent-type: text/x-component\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nx-nextjs-rewritten-path: /marulabet.com\u0026blue\u0026en/second-design/privacy\r\nx-middleware-rewrite: /marulabet.com\u0026blue\u0026en/second-design/privacy?_rsc=r54j0\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch, Accept-Encoding\r\nx-nextjs-cache: STALE\r\nx-nextjs-prerender: 1\r\nx-nextjs-postponed: 2\r\ncache-control: s-maxage=600, stale-while-revalidate=31535400\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SOQxXKmk5ckDFi%2FqGB9lOI6LsX6xrvWFn8BE7QZ%2FXBu9522HzbNABTMZK94Yy5sMVKdFLLEPUKe0Cu3eRLjF%2FVRyKzNQJS4TIEnt\"}]}\r\ncf-ray: 9bc0d4dfe87256ae-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2459,"size_decoded":0,"mime_type":"text/x-component","magic":"ASCII text, with very long lines (950)","md5":"c5664e45f74bccd5c9662a8b140baeba","sha1":"34527e4677ac8deef7744aa4980995aa01740a6b","sha256":"7fb95ea73ad9b9bbdef60c7f1c25deb78cec8006814015e62c23ee237ae8ec6b","sha512":"bd0750a111aae868d55b0de84c7a2fcebbdf1e4715a3cbbd9b66fad807dc7e4f7779af6855c7c1f10d19120167237a61c6bcf5e32449e635a2b6d8f4c44e6354","ssdeep":"","tlshash":"36519e0dc8499db498d9d59d62d5d7016658af3bf1b88dace04bdc64038f03d0beab87","first_seen":"2026-01-11T02:03:05.4857Z","last_seen":"2026-01-11T02:03:05.4857Z","times_seen":1,"resource_available":false,"data":null}},"time_used":192,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":192,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-11","alert":"Sinkholed","trigger":"marulabet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"marulabet.com/second-design/ranks/bronze2.webp","fqdn":"marulabet.com","domain":"marulabet.com","tld":"com"},"ip":{"addr":"104.21.14.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://marulabet.com/","date":"2026-01-11T02:02:23.772Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"marulabet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Dec 2025 13:13:09 GMT","end":"Mon, 30 Mar 2026 14:11:58 GMT"},"fingerprint":{"sha1":"FA:EA:E7:29:47:4D:0C:8A:97:DE:34:6B:B0:73:EC:0F:02:FE:A8:70","sha256":"70:01:CE:F8:9D:67:13:DC:31:37:03:2C:22:AB:68:81:D6:DE:0C:E8:5F:F1:92:32:46:D8:04:E1:9A:38:2E:AD"}}},"request":{"raw":"GET /second-design/ranks/bronze2.webp HTTP/1.1\r\nHost: marulabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://marulabet.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 11 Jan 2026 02:02:23 GMT\r\ncontent-type: image/webp\r\ncontent-length: 6166\r\npriority: u=4,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Sat, 27 Dec 2025 17:40:05 GMT\r\netag: W/\"1816-19b60e56679\"\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fhY0J7q6JD9inBVUU4PT9LEYvx2cSre3APqhRKFjbpEAsGGi3tyI7RciR65Oin6FqvsFRphZCBxidebEyeMvFwipm5t8iKMT707c\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9bc0d4ea78ad56ae-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6166,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"b0294eb179dee9507be7985f582da780","sha1":"4184da36f1fdc5d6fc8af440c3bd23f3641c0fb9","sha256":"ace7871d7d2f5adb69aea242ce7616bbc8e042327add531cd34be44041e2f21e","sha512":"369d903b083bb67b8ffac89bb6df8e5b451d6545df956d0fa631c8e4547bca0a6b0f1e21e1ce4f1f68cc3f31da064a869014cfcf37cac8708444bc367d056c0d","ssdeep":"192:2CsTxSBvEmFoRPHyzb04BFHbbPOM1FIqhELq:wTxSBvIVe4SF3WoFlELq","tlshash":"0dd18e72a6f7457c516b05494a14b8e1a92abc26ad91c60f067680f6a2d00f289fdcf1","first_seen":"2026-01-11T02:03:05.487189Z","last_seen":"2026-02-19T17:02:28.727051Z","times_seen":35,"resource_available":false,"data":null}},"time_used":89,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":84,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-11","alert":"Sinkholed","trigger":"marulabet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"marulabet.com/second-design/ranks/gold2.webp","fqdn":"marulabet.com","domain":"marulabet.com","tld":"com"},"ip":{"addr":"104.21.14.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://marulabet.com/","date":"2026-01-11T02:02:23.801Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"marulabet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Dec 2025 13:13:09 GMT","end":"Mon, 30 Mar 2026 14:11:58 GMT"},"fingerprint":{"sha1":"FA:EA:E7:29:47:4D:0C:8A:97:DE:34:6B:B0:73:EC:0F:02:FE:A8:70","sha256":"70:01:CE:F8:9D:67:13:DC:31:37:03:2C:22:AB:68:81:D6:DE:0C:E8:5F:F1:92:32:46:D8:04:E1:9A:38:2E:AD"}}},"request":{"raw":"GET /second-design/ranks/gold2.webp HTTP/1.1\r\nHost: marulabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://marulabet.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 11 Jan 2026 02:02:23 GMT\r\ncontent-type: image/webp\r\ncontent-length: 5890\r\npriority: u=4,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Sat, 27 Dec 2025 17:40:05 GMT\r\netag: W/\"1702-19b60e56679\"\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4NUxKyKPIvQdW%2Fo0VKp3o67xV1iQfskv4BTBC4jCfeMXvb7x63f%2B%2BmLZk%2BFdAlO0puaLvEgdCrEqc3%2FvS8oHAOgn%2BilAnLbhxFNt\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9bc0d4eaa8b656ae-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5890,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"b42ad808ada8aee01b29d5c67da60b19","sha1":"d244a415a989989f9b3526f1b20e43a18663fdf6","sha256":"1553c7ad287f236dd0dd773366c07500b544b2829c1135d83c961a5a44847cf7","sha512":"5aa7d32715644f66116126a68ac2cbd12451cb28e9f15e5f4e007dd4c07396a6394f2db96391bdc35a7424fb737a4db4fde86e0acc82343cfeea2bf18ba03884","ssdeep":"96:EuVHF3QRUx/IY5tr1t8I+NlpHt914k00GbyuYh6uvLyaHLgmSmX7GMXuE4AheVq9:xHd//TtXS1jGOYYyaHLJSmaAuEPheVq9","tlshash":"9ec1afbbf89e799a6b86d2cce0d7960658d50ec97536132cc305e54da13c28ec185a63","first_seen":"2026-01-11T01:55:53.50643Z","last_seen":"2026-02-13T20:55:00.84397Z","times_seen":29,"resource_available":false,"data":null}},"time_used":69,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":69,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-11","alert":"Sinkholed","trigger":"marulabet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"marulabet.com/second-design/ranks/platinum2.webp","fqdn":"marulabet.com","domain":"marulabet.com","tld":"com"},"ip":{"addr":"104.21.14.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://marulabet.com/","date":"2026-01-11T02:02:23.808Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"marulabet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Dec 2025 13:13:09 GMT","end":"Mon, 30 Mar 2026 14:11:58 GMT"},"fingerprint":{"sha1":"FA:EA:E7:29:47:4D:0C:8A:97:DE:34:6B:B0:73:EC:0F:02:FE:A8:70","sha256":"70:01:CE:F8:9D:67:13:DC:31:37:03:2C:22:AB:68:81:D6:DE:0C:E8:5F:F1:92:32:46:D8:04:E1:9A:38:2E:AD"}}},"request":{"raw":"GET /second-design/ranks/platinum2.webp HTTP/1.1\r\nHost: marulabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://marulabet.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 11 Jan 2026 02:02:23 GMT\r\ncontent-type: image/webp\r\ncontent-length: 6378\r\npriority: u=4,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Sat, 27 Dec 2025 17:40:05 GMT\r\netag: W/\"18ea-19b60e56679\"\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FLSMQBZXTd1MvxVB%2FRusvQ4bvOqjqnc%2BEbSCYpChS3zxeiUkb9xv4Z6KZOi4HMXOb6VwNvjParveGyHVp5h5hiQZulxKvoUt9whI\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9bc0d4eab8ba56ae-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6378,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"4a423f6be8f0fecf632a0f5d0b7d9c02","sha1":"467f574178cf7fcee18c4c6a7929e0a11cef1f0f","sha256":"66b2d04dfa37598e4198f58f697e2c22a001f5855036be548b033469ba34065c","sha512":"e3433d8eadac1e5e87ef2ce2da4920e5836ab04ddee60126714b3dbec42c3dbc7bc2969a39d004fc2cca26d7c7d7adbcd8ade2a9dad7af03dbf24775280fdc0d","ssdeep":"192:PS7I+JuOAeimepdWkN4AgW2KYNQgbC3wFeqUqU:PIIuzAvrdWdAgW76Q+CgFeCU","tlshash":"c4d190114199f84a0569089398bad3dac34000dfb37a52db1392d372ee69d7c2d6c7c7","first_seen":"2026-01-11T01:55:53.573014Z","last_seen":"2026-02-19T17:02:28.751592Z","times_seen":44,"resource_available":false,"data":null}},"time_used":66,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":64,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-11","alert":"Sinkholed","trigger":"marulabet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"marulabet.com/group/live?_rsc=r54j0","fqdn":"marulabet.com","domain":"marulabet.com","tld":"com"},"ip":{"addr":"104.21.14.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://marulabet.com/","date":"2026-01-11T02:02:23.821Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"marulabet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Dec 2025 13:13:09 GMT","end":"Mon, 30 Mar 2026 14:11:58 GMT"},"fingerprint":{"sha1":"FA:EA:E7:29:47:4D:0C:8A:97:DE:34:6B:B0:73:EC:0F:02:FE:A8:70","sha256":"70:01:CE:F8:9D:67:13:DC:31:37:03:2C:22:AB:68:81:D6:DE:0C:E8:5F:F1:92:32:46:D8:04:E1:9A:38:2E:AD"}}},"request":{"raw":"GET /group/live?_rsc=r54j0 HTTP/1.1\r\nHost: marulabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://marulabet.com/\r\nrsc: 1\r\nnext-router-prefetch: 1\r\nnext-router-segment-prefetch: /_tree\r\nnext-url: /marulabet.com%26blue%26en/second-design\r\nsentry-trace: 9ffef7b14fef40b3bd2e466e13219bb9-8e1356768a80ffed-0\r\nbaggage: sentry-environment=production,sentry-release=web%402.7.0,sentry-public_key=6d319d1014d598ea4a0365923853ee67,sentry-trace_id=9ffef7b14fef40b3bd2e466e13219bb9,sentry-sampled=false,sentry-sample_rand=0.22013458521750728,sentry-sample_rate=0.1\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 11 Jan 2026 02:02:23 GMT\r\ncontent-type: text/x-component\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nx-nextjs-rewritten-path: /marulabet.com\u0026blue\u0026en/second-design/group/live\r\nx-middleware-rewrite: /marulabet.com\u0026blue\u0026en/second-design/group/live?_rsc=r54j0\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch, Accept-Encoding\r\nx-nextjs-cache: HIT\r\nx-nextjs-prerender: 1\r\nx-nextjs-postponed: 2\r\ncache-control: s-maxage=600, stale-while-revalidate=31535400\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6LPHqQViE2cqvfm7msTGNZw%2Bi0OxU2Ee0ioftiiOso6NZcMLcDHlBevnczmVDToUHIKmYjUmUK29nOnaZQ%2FKG9Z7tK7owfyhh0pA\"}]}\r\ncf-ray: 9bc0d4eac8c056ae-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2575,"size_decoded":0,"mime_type":"text/x-component","magic":"ASCII text, with very long lines (1066)","md5":"d074b45277876fba0c89087b6a2acc68","sha1":"d060d9115d6d2329c5d06b23626ffa97658c0c79","sha256":"72fcdf4565f6ba05626dbb4ced11a7cdb2a6b717b62259caf9daf3381295cdda","sha512":"3395aebaf8f1cd172eae0dea4f55438bfb38f1fcc8965181f9bf1f7d8c9d8a2d2daff454e7cf2398daa2e1ab0895b1a86a2aa1b0d8e44bb5218b03ec19284cea","ssdeep":"","tlshash":"7251af0cc8496db498d9d59962d5d7016654af3bf1b88cbce04bdc54138f03d0baab87","first_seen":"2026-01-11T02:03:05.490623Z","last_seen":"2026-01-11T02:03:05.490623Z","times_seen":1,"resource_available":false,"data":null}},"time_used":108,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":108,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-11","alert":"Sinkholed","trigger":"marulabet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"marulabet.com/about-us?_rsc=1jkk3","fqdn":"marulabet.com","domain":"marulabet.com","tld":"com"},"ip":{"addr":"104.21.14.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://marulabet.com/","date":"2026-01-11T02:02:24.720Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"marulabet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Dec 2025 13:13:09 GMT","end":"Mon, 30 Mar 2026 14:11:58 GMT"},"fingerprint":{"sha1":"FA:EA:E7:29:47:4D:0C:8A:97:DE:34:6B:B0:73:EC:0F:02:FE:A8:70","sha256":"70:01:CE:F8:9D:67:13:DC:31:37:03:2C:22:AB:68:81:D6:DE:0C:E8:5F:F1:92:32:46:D8:04:E1:9A:38:2E:AD"}}},"request":{"raw":"GET /about-us?_rsc=1jkk3 HTTP/1.1\r\nHost: marulabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://marulabet.com/\r\nrsc: 1\r\nnext-router-prefetch: 1\r\nnext-router-segment-prefetch: /_head\r\nnext-url: /marulabet.com%26blue%26en/second-design\r\nsentry-trace: 9ffef7b14fef40b3bd2e466e13219bb9-9279dc35d6b09c10-0\r\nbaggage: sentry-environment=production,sentry-release=web%402.7.0,sentry-public_key=6d319d1014d598ea4a0365923853ee67,sentry-trace_id=9ffef7b14fef40b3bd2e466e13219bb9,sentry-sampled=false,sentry-sample_rand=0.22013458521750728,sentry-sample_rate=0.1\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 11 Jan 2026 02:02:24 GMT\r\ncontent-type: text/x-component\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nx-nextjs-rewritten-path: /marulabet.com\u0026blue\u0026en/second-design/about-us\r\nx-middleware-rewrite: /marulabet.com\u0026blue\u0026en/second-design/about-us?_rsc=1jkk3\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch, Accept-Encoding\r\nx-nextjs-cache: HIT\r\nx-nextjs-prerender: 1\r\nx-nextjs-postponed: 2\r\ncache-control: s-maxage=600, stale-while-revalidate=31535400\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3l5yYhVWQ%2Ftews%2FBFyUKmSwxuzVGDttx76HexTAhyGu%2FjxjGw6Vr74meUDAO9aKZEnr24RaQc9uVxzE57zEtAmVlxhY%2BGQ6wKS4u\"}]}\r\ncf-ray: 9bc0d4f088f156ae-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1965,"size_decoded":0,"mime_type":"text/x-component","magic":"ASCII text, with very long lines (1444)","md5":"6c421767d164700bb202c9c9dc5a75f1","sha1":"3307eee16bcd0354b14a8bc46fe024d0cfa83dc8","sha256":"1bde8df6c6a1bdd59c977fe118261690fa64a378821417905e1f73dc387b07a4","sha512":"da5bff3cd87a9f3e0299e5382e754348a6ae99f592871f64568466c98ff9a5a02dfcad92dcce2da0a0da9f42d2d0612d95ab29e1815cc95b53a6e4a04ad84467","ssdeep":"","tlshash":"f2410f7a880cec8e5a67c959086ff31a160d1677c6701e7adaaccd0e19c602e5f60f90","first_seen":"2026-01-11T02:03:05.226237Z","last_seen":"2026-01-11T02:03:05.226237Z","times_seen":1,"resource_available":false,"data":null}},"time_used":92,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":92,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-11","alert":"Sinkholed","trigger":"marulabet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"marulabet.com/group/table?_rsc=1jkk3","fqdn":"marulabet.com","domain":"marulabet.com","tld":"com"},"ip":{"addr":"104.21.14.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://marulabet.com/","date":"2026-01-11T02:02:24.959Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"marulabet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Dec 2025 13:13:09 GMT","end":"Mon, 30 Mar 2026 14:11:58 GMT"},"fingerprint":{"sha1":"FA:EA:E7:29:47:4D:0C:8A:97:DE:34:6B:B0:73:EC:0F:02:FE:A8:70","sha256":"70:01:CE:F8:9D:67:13:DC:31:37:03:2C:22:AB:68:81:D6:DE:0C:E8:5F:F1:92:32:46:D8:04:E1:9A:38:2E:AD"}}},"request":{"raw":"GET /group/table?_rsc=1jkk3 HTTP/1.1\r\nHost: marulabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://marulabet.com/\r\nrsc: 1\r\nnext-router-prefetch: 1\r\nnext-router-segment-prefetch: /_head\r\nnext-url: /marulabet.com%26blue%26en/second-design\r\nsentry-trace: 9ffef7b14fef40b3bd2e466e13219bb9-8082f56f9ab6d91e-0\r\nbaggage: sentry-environment=production,sentry-release=web%402.7.0,sentry-public_key=6d319d1014d598ea4a0365923853ee67,sentry-trace_id=9ffef7b14fef40b3bd2e466e13219bb9,sentry-sampled=false,sentry-sample_rand=0.22013458521750728,sentry-sample_rate=0.1\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 11 Jan 2026 02:02:25 GMT\r\ncontent-type: text/x-component\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nx-nextjs-rewritten-path: /marulabet.com\u0026blue\u0026en/second-design/group/table\r\nx-middleware-rewrite: /marulabet.com\u0026blue\u0026en/second-design/group/table?_rsc=1jkk3\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch, Accept-Encoding\r\nx-nextjs-cache: HIT\r\nx-nextjs-prerender: 1\r\nx-nextjs-postponed: 2\r\ncache-control: s-maxage=600, stale-while-revalidate=31535400\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cqBzJIqijhBER9wK4knlig7TrdkiPPXXbJkKCnZofjDnPqGIWHo1X%2BM1IW1NFryLPybqi97n9iDbpiK%2FUQGKQHEf40N6WUK0Z40F\"}]}\r\ncf-ray: 9bc0d4f2090256ae-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1965,"size_decoded":0,"mime_type":"text/x-component","magic":"ASCII text, with very long lines (1444)","md5":"6c421767d164700bb202c9c9dc5a75f1","sha1":"3307eee16bcd0354b14a8bc46fe024d0cfa83dc8","sha256":"1bde8df6c6a1bdd59c977fe118261690fa64a378821417905e1f73dc387b07a4","sha512":"da5bff3cd87a9f3e0299e5382e754348a6ae99f592871f64568466c98ff9a5a02dfcad92dcce2da0a0da9f42d2d0612d95ab29e1815cc95b53a6e4a04ad84467","ssdeep":"","tlshash":"f2410f7a880cec8e5a67c959086ff31a160d1677c6701e7adaaccd0e19c602e5f60f90","first_seen":"2026-01-11T02:03:05.226237Z","last_seen":"2026-01-11T02:03:05.226237Z","times_seen":1,"resource_available":false,"data":null}},"time_used":95,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":95,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-11","alert":"Sinkholed","trigger":"marulabet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"marulabet.com/group/shows?_rsc=1jkk3","fqdn":"marulabet.com","domain":"marulabet.com","tld":"com"},"ip":{"addr":"104.21.14.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://marulabet.com/","date":"2026-01-11T02:02:25.065Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"marulabet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Dec 2025 13:13:09 GMT","end":"Mon, 30 Mar 2026 14:11:58 GMT"},"fingerprint":{"sha1":"FA:EA:E7:29:47:4D:0C:8A:97:DE:34:6B:B0:73:EC:0F:02:FE:A8:70","sha256":"70:01:CE:F8:9D:67:13:DC:31:37:03:2C:22:AB:68:81:D6:DE:0C:E8:5F:F1:92:32:46:D8:04:E1:9A:38:2E:AD"}}},"request":{"raw":"GET /group/shows?_rsc=1jkk3 HTTP/1.1\r\nHost: marulabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://marulabet.com/\r\nrsc: 1\r\nnext-router-prefetch: 1\r\nnext-router-segment-prefetch: /_head\r\nnext-url: /marulabet.com%26blue%26en/second-design\r\nsentry-trace: 9ffef7b14fef40b3bd2e466e13219bb9-a35941b6294eda6f-0\r\nbaggage: sentry-environment=production,sentry-release=web%402.7.0,sentry-public_key=6d319d1014d598ea4a0365923853ee67,sentry-trace_id=9ffef7b14fef40b3bd2e466e13219bb9,sentry-sampled=false,sentry-sample_rand=0.22013458521750728,sentry-sample_rate=0.1\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 11 Jan 2026 02:02:25 GMT\r\ncontent-type: text/x-component\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nx-nextjs-rewritten-path: /marulabet.com\u0026blue\u0026en/second-design/group/shows\r\nx-middleware-rewrite: /marulabet.com\u0026blue\u0026en/second-design/group/shows?_rsc=1jkk3\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch, Accept-Encoding\r\nx-nextjs-cache: HIT\r\nx-nextjs-prerender: 1\r\nx-nextjs-postponed: 2\r\ncache-control: s-maxage=600, stale-while-revalidate=31535400\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QfbqlvD%2BNh%2BPz7VFlc9SWB4HPSf8gvrMwYdya7zq5CC8O%2BihhEWnV3baq9h%2FmXV8gncU3t3Cy5RiqlBg3ITTWpgp6wKzOP2e0oMj\"}]}\r\ncf-ray: 9bc0d4f2b90956ae-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1965,"size_decoded":0,"mime_type":"text/x-component","magic":"ASCII text, with very long lines (1444)","md5":"6c421767d164700bb202c9c9dc5a75f1","sha1":"3307eee16bcd0354b14a8bc46fe024d0cfa83dc8","sha256":"1bde8df6c6a1bdd59c977fe118261690fa64a378821417905e1f73dc387b07a4","sha512":"da5bff3cd87a9f3e0299e5382e754348a6ae99f592871f64568466c98ff9a5a02dfcad92dcce2da0a0da9f42d2d0612d95ab29e1815cc95b53a6e4a04ad84467","ssdeep":"","tlshash":"f2410f7a880cec8e5a67c959086ff31a160d1677c6701e7adaaccd0e19c602e5f60f90","first_seen":"2026-01-11T02:03:05.226237Z","last_seen":"2026-01-11T02:03:05.226237Z","times_seen":1,"resource_available":false,"data":null}},"time_used":133,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":133,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-11","alert":"Sinkholed","trigger":"marulabet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"marulabet.com/_next/static/chunks/7240300e42edba3b.css","fqdn":"marulabet.com","domain":"marulabet.com","tld":"com"},"ip":{"addr":"104.21.14.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://marulabet.com/","date":"2026-01-11T02:02:20.371Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"marulabet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Dec 2025 13:13:09 GMT","end":"Mon, 30 Mar 2026 14:11:58 GMT"},"fingerprint":{"sha1":"FA:EA:E7:29:47:4D:0C:8A:97:DE:34:6B:B0:73:EC:0F:02:FE:A8:70","sha256":"70:01:CE:F8:9D:67:13:DC:31:37:03:2C:22:AB:68:81:D6:DE:0C:E8:5F:F1:92:32:46:D8:04:E1:9A:38:2E:AD"}}},"request":{"raw":"GET /_next/static/chunks/7240300e42edba3b.css HTTP/1.1\r\nHost: marulabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://marulabet.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 11 Jan 2026 02:02:20 GMT\r\ncontent-type: text/css; charset=UTF-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pwWsh8XEXOENh6oBJDZt8twXn5DaKk2vAUbIAMbht%2FERCC8DKBgI5U98tPwo6hNPtAITsxppKz9M8gSIei7pUJX%2B5Go%2BpVNa4zY6\"}]}\r\npriority: u=2,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: br\r\nlast-modified: Sat, 27 Dec 2025 18:15:13 GMT\r\netag: W/\"16d-19b61058f68\"\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9bc0d4d4c80856ae-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":365,"size_decoded":0,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text, with very long lines (364)","md5":"7e2e89ec5893733a99ec55a58da0ce6a","sha1":"ef1047c61394200e16c0f13df4acc1e1288bfce3","sha256":"47d3f55021d9b1177167ccf6f41ab139f5bb5aac76a02f6e3465062ffd24eb8d","sha512":"f088bbaf95d4dff5200625e4c54512fbb0803aff2fa8fd45d969e053a0b6feae87a716a57e5f0f1a29f793255a3475c63cec5b3cbc3d883dac3daba47c3c5737","ssdeep":"","tlshash":"58e06d19d07211c430fb7929aad4d72f044480d3318c85fcb6342ff8aa36f7e4725849","first_seen":"2026-01-11T01:55:53.485342Z","last_seen":"2026-01-11T02:03:05.491957Z","times_seen":2,"resource_available":false,"data":null}},"time_used":82,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":82,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-11","alert":"Sinkholed","trigger":"marulabet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"marulabet.com/_next/static/chunks/722cf75cbbc62a0b.js","fqdn":"marulabet.com","domain":"marulabet.com","tld":"com"},"ip":{"addr":"104.21.14.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://marulabet.com/","date":"2026-01-11T02:02:20.399Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"marulabet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Dec 2025 13:13:09 GMT","end":"Mon, 30 Mar 2026 14:11:58 GMT"},"fingerprint":{"sha1":"FA:EA:E7:29:47:4D:0C:8A:97:DE:34:6B:B0:73:EC:0F:02:FE:A8:70","sha256":"70:01:CE:F8:9D:67:13:DC:31:37:03:2C:22:AB:68:81:D6:DE:0C:E8:5F:F1:92:32:46:D8:04:E1:9A:38:2E:AD"}}},"request":{"raw":"GET /_next/static/chunks/722cf75cbbc62a0b.js HTTP/1.1\r\nHost: marulabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://marulabet.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 11 Jan 2026 02:02:20 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Sat, 27 Dec 2025 18:15:15 GMT\r\netag: W/\"6586-19b61059738\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7ABf1hyb3GOh9%2Be5HNpFl5udrS9PGLr0sg1ZNqXVLS%2F%2B48TjvbMspdSDAPssOcZHOO0lYG62CoX8To4t5Z0iAqkECIsLD1hmmcCe\"}]}\r\ncf-ray: 9bc0d4d4e81a56ae-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":25990,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (24890)","md5":"b8ab69fcd6b2d9f665d2a18643a8a99e","sha1":"fbcb8fc26045fbacefa6a2c7f55820b1d780cf8c","sha256":"ed48fa5e5d1d540ef27b5831e006e469666003e384a79433648cf622d6ffbf3b","sha512":"c525108313fee3ca62f123b61e2875a28db9f8f704af326a24cf770d06bd71333507ded232152f417808ef7264360d23973441394f15ddfe0b71ae48440d83ee","ssdeep":"384:ksiMYU5JGvzUaAH3j4ZLGYmu9do41baQ8H1Qnu7WAcltyxuquX8rjq:ZPGvycZCD45aVVqu75ru","tlshash":"a4c26ce97355b03e4ad90682d02e4901f2fe296f924c449cf33c98fe2575e9812d6f79","first_seen":"2026-01-11T01:55:53.448828Z","last_seen":"2026-01-11T02:03:05.492813Z","times_seen":2,"resource_available":true,"data":null}},"time_used":122,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":76,"receive":46,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-11","alert":"Sinkholed","trigger":"marulabet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"marulabet.com/_next/static/chunks/4b73fe5a475716f9.js","fqdn":"marulabet.com","domain":"marulabet.com","tld":"com"},"ip":{"addr":"104.21.14.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://marulabet.com/","date":"2026-01-11T02:02:20.406Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"marulabet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Dec 2025 13:13:09 GMT","end":"Mon, 30 Mar 2026 14:11:58 GMT"},"fingerprint":{"sha1":"FA:EA:E7:29:47:4D:0C:8A:97:DE:34:6B:B0:73:EC:0F:02:FE:A8:70","sha256":"70:01:CE:F8:9D:67:13:DC:31:37:03:2C:22:AB:68:81:D6:DE:0C:E8:5F:F1:92:32:46:D8:04:E1:9A:38:2E:AD"}}},"request":{"raw":"GET /_next/static/chunks/4b73fe5a475716f9.js HTTP/1.1\r\nHost: marulabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://marulabet.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 11 Jan 2026 02:02:20 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Tue, 06 Jan 2026 19:23:38 GMT\r\netag: W/\"83ae-19b94c3ca90\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gU6MFDtrdX%2BYNj%2BIwJTH%2BfnHJsujFE4BeiUsgs6O3dWwB51XKAQt8tMF7ZtJZXZ27ayETIxJiJCfzYl07qWnwCCigc8sNvAAnedO\"}]}\r\ncf-ray: 9bc0d4d4f81d56ae-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":33710,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (33353)","md5":"d36b24fc99ee384e0689eef065597a6c","sha1":"8ef86b2640497083b9d8305d48babc41bec3284b","sha256":"c36e1856c14ed3099197c8082b210ea9ddc07a2a7ab4663c8b3e65d5e12dc125","sha512":"5513fdad3b32216d6a72ffef92b37ac87e5ae6ae430c25b3d1b926723eb66fd719678cb5bc560f1f17db468b1ecaa676b908676ab2e2dac079dbbacc7243c59e","ssdeep":"768:7ndxrGZTCyFcQvmOwaCHHZgKIGrBvnKgApILOHz2syklZ0:7ndxrGZTCyFcQvKaC9rgALOT2Xkli","tlshash":"f1e2fa947520ac75de2f4afd7089c412a7fc2120c9186861f2fe5cbe13d9ac97362b8d","first_seen":"2026-01-11T01:55:53.449721Z","last_seen":"2026-02-19T17:02:28.864329Z","times_seen":73,"resource_available":true,"data":null}},"time_used":112,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":78,"receive":34,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-11","alert":"Sinkholed","trigger":"marulabet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"marulabet.com/_next/static/media/Inter_Regular-s.p.b62ab84d.ttf","fqdn":"marulabet.com","domain":"marulabet.com","tld":"com"},"ip":{"addr":"104.21.14.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://marulabet.com/","date":"2026-01-11T02:02:21.678Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"marulabet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Dec 2025 13:13:09 GMT","end":"Mon, 30 Mar 2026 14:11:58 GMT"},"fingerprint":{"sha1":"FA:EA:E7:29:47:4D:0C:8A:97:DE:34:6B:B0:73:EC:0F:02:FE:A8:70","sha256":"70:01:CE:F8:9D:67:13:DC:31:37:03:2C:22:AB:68:81:D6:DE:0C:E8:5F:F1:92:32:46:D8:04:E1:9A:38:2E:AD"}}},"request":{"raw":"GET /_next/static/media/Inter_Regular-s.p.b62ab84d.ttf HTTP/1.1\r\nHost: marulabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://marulabet.com/_next/static/chunks/a85c5f2112ae0905.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 11 Jan 2026 02:02:21 GMT\r\ncontent-type: font/ttf\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Thu, 25 Dec 2025 14:07:50 GMT\r\netag: W/\"63610-19b55d65af0\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nage: 1424433\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=AuwVJR1%2FFZXwjpszinPUzwuNCtqmsvKYQ8p8bXpeZukUeCqtTl%2BGzU72YmViPQkjD8o9o9aB5T%2BeBn53gGwf5C%2BGi%2B67mr0ff2pB\"}]}\r\ncf-ray: 9bc0d4dd786656ae-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":407056,"size_decoded":0,"mime_type":"font/ttf","magic":"TrueType Font data, 17 tables, 1st \"GDEF\", 35 names, Microsoft, language 0x409, Copyright 2016 The Inter Project AuthorsInterRegular4.000;git-a52131595;RSMS;Inter-RegularInter ","md5":"fdb50e0d48cdcf775fa1ac0dc3c33bd4","sha1":"5c95e5d66572aeca303512ba41a8dde0cea92c80","sha256":"64f8be6e55c37e32ef03da99714bf3aa58b8f2099bfe4f759a7578e3b8291123","sha512":"20ce8100c96058d4e64a12d0817b7ce638cec9f5d03651320eb6b9c3f47ee289ccc695bd3b5b6bf8e0867cdab0ebb6e8cae77df054e185828a6a13f3733ede53","ssdeep":"6144:sSnv4lXwF22mZ8JWPziKSQUmeKGVOOxAdgwH9evDFDynor51EOO2UAGbzxSr1w7b:sSvJ22mZzPziKwLOOkvH9IQoUf7P08","tlshash":"30845a17e70ad70ede452e308af987c133b9bca1785a924bb59e3a58dd971f409cb0d0","first_seen":"2024-07-29T21:54:32Z","last_seen":"2026-08-04T16:44:03.355061Z","times_seen":490,"resource_available":false,"data":null}},"time_used":66,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":57,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-11","alert":"Sinkholed","trigger":"marulabet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"marulabet.com/games_new_webp/pragmatic-play-the-dog-house.webp","fqdn":"marulabet.com","domain":"marulabet.com","tld":"com"},"ip":{"addr":"104.21.14.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://marulabet.com/","date":"2026-01-11T02:02:31.107Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"marulabet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Dec 2025 13:13:09 GMT","end":"Mon, 30 Mar 2026 14:11:58 GMT"},"fingerprint":{"sha1":"FA:EA:E7:29:47:4D:0C:8A:97:DE:34:6B:B0:73:EC:0F:02:FE:A8:70","sha256":"70:01:CE:F8:9D:67:13:DC:31:37:03:2C:22:AB:68:81:D6:DE:0C:E8:5F:F1:92:32:46:D8:04:E1:9A:38:2E:AD"}}},"request":{"raw":"GET /games_new_webp/pragmatic-play-the-dog-house.webp HTTP/1.1\r\nHost: marulabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://marulabet.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 11 Jan 2026 02:02:31 GMT\r\ncontent-type: image/webp\r\ncontent-length: 38246\r\npriority: u=4,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Thu, 01 Jan 2026 18:08:31 GMT\r\netag: W/\"9566-19b7abf3918\"\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RVMU%2BHu7pPketouBAqPiLVyQTC81PRoOs5IGzZQ2es9Kht4OXtWXavPwMdPJvVNyKvY5ZeMvqWNM8%2FhFJQun8RESJJDXk3QcfSA8\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9bc0d51879f056ae-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":38246,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 408x546, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"5ddc48369039a894ce8f6b881f3f1d85","sha1":"f16b41e445a4177f810d5d02171b758e81c90474","sha256":"481fdfc447f078c67657b0d6d541e1c31d87a7d827118bd81816a7b6f6c372fd","sha512":"e82d61ebceb5b314073bbe8c26c6ad149a041b02f9b4f5fa40dca81265b8fb3603c229806fcb4605890c42cb0a325517aa49dee85feb92bd4f5e6ec474b4e714","ssdeep":"768:xBpniM5vUuXZN/7RFIc3iEEOomKsHFFPlyNhSmu1K4h:xr8gZNTRF8E9oXsliix","tlshash":"1903f1e0e8a843f504e24e46d59da7416ecfe89f3cd7398808d4f61851a8e1d2337e39","first_seen":"2026-01-11T02:03:05.494642Z","last_seen":"2026-01-11T02:03:05.494642Z","times_seen":1,"resource_available":false,"data":null}},"time_used":68,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":65,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-11","alert":"Sinkholed","trigger":"marulabet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"marulabet.com/api/socket.io/?EIO=4\u0026transport=polling\u0026t=39nkwjuz","fqdn":"marulabet.com","domain":"marulabet.com","tld":"com"},"ip":{"addr":"104.21.14.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://marulabet.com/","date":"2026-01-11T02:02:21.789Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"marulabet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Dec 2025 13:13:09 GMT","end":"Mon, 30 Mar 2026 14:11:58 GMT"},"fingerprint":{"sha1":"FA:EA:E7:29:47:4D:0C:8A:97:DE:34:6B:B0:73:EC:0F:02:FE:A8:70","sha256":"70:01:CE:F8:9D:67:13:DC:31:37:03:2C:22:AB:68:81:D6:DE:0C:E8:5F:F1:92:32:46:D8:04:E1:9A:38:2E:AD"}}},"request":{"raw":"GET /api/socket.io/?EIO=4\u0026transport=polling\u0026t=39nkwjuz HTTP/1.1\r\nHost: marulabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAuthorization: undefined\r\nsentry-trace: 9ffef7b14fef40b3bd2e466e13219bb9-b6e0c2aad65f882f-0\r\nbaggage: sentry-environment=production,sentry-release=web%402.7.0,sentry-public_key=6d319d1014d598ea4a0365923853ee67,sentry-trace_id=9ffef7b14fef40b3bd2e466e13219bb9,sentry-sampled=false,sentry-sample_rand=0.22013458521750728,sentry-sample_rate=0.1\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://marulabet.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 11 Jan 2026 02:02:21 GMT\r\ncontent-type: text/plain; charset=UTF-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TgQp7PEkFLB2lM2pxgMf67C7ADLYB5Rxbhj3k1mQgnCsH1HcEbrd0Zg7pJtaAYhyCp2LHpUzWgxkFMwG0Zog04JHSqlninwPE%2FmG\"}]}\r\npriority: u=3,i=?0\r\naccess-control-allow-origin: *\r\ncache-control: no-store\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9bc0d4de286a56ae-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":118,"size_decoded":0,"mime_type":"text/plain; charset=UTF-8","magic":"ASCII text, with no line terminators","md5":"d8063bad1e26c862a1180e210207a6a5","sha1":"8665e1523b014f73156a60eb6bb2ae856a9a9c7a","sha256":"0e56eb5a70c9204aefe7993fb077f8d222c2ff060829117b3575c7904b7a56c1","sha512":"5a7a5deea2620c0542e350ba6badad8a779ba1c716a22595ec49137da342ecab0d48d4908f7c68d738af17c245bef54321b218e7736aec62fd9a4826d56a761f","ssdeep":"","tlshash":"17b09b8c465d53c5eb30728671e39b050954785e99c65898335444884577510701169b","first_seen":"2026-01-11T02:03:05.495859Z","last_seen":"2026-01-11T02:03:05.495859Z","times_seen":1,"resource_available":false,"data":null}},"time_used":142,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":142,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-11","alert":"Sinkholed","trigger":"marulabet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"marulabet.com/_next/static/media/Roboto_Medium-s.p.caaade52.ttf","fqdn":"marulabet.com","domain":"marulabet.com","tld":"com"},"ip":{"addr":"104.21.14.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://marulabet.com/","date":"2026-01-11T02:02:20.360Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"marulabet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Dec 2025 13:13:09 GMT","end":"Mon, 30 Mar 2026 14:11:58 GMT"},"fingerprint":{"sha1":"FA:EA:E7:29:47:4D:0C:8A:97:DE:34:6B:B0:73:EC:0F:02:FE:A8:70","sha256":"70:01:CE:F8:9D:67:13:DC:31:37:03:2C:22:AB:68:81:D6:DE:0C:E8:5F:F1:92:32:46:D8:04:E1:9A:38:2E:AD"}}},"request":{"raw":"GET /_next/static/media/Roboto_Medium-s.p.caaade52.ttf HTTP/1.1\r\nHost: marulabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://marulabet.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 11 Jan 2026 02:02:20 GMT\r\ncontent-type: font/ttf\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Tue, 23 Dec 2025 14:08:10 GMT\r\netag: W/\"292c4-19b4b89f110\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6%2FlQXGCt4P2xxhzYeFK2xqAMgDAi5UKEVIadeyd1ndsjatzeJuUknLAJlEQ0bsxE%2BLuysTgyrdobezphbkEdbQSMkCdHsj3aH4D5\"}]}\r\ncf-ray: 9bc0d4d4b80256ae-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":168644,"size_decoded":0,"mime_type":"font/ttf","magic":"TrueType Font data, 18 tables, 1st \"GDEF\", 15 names, Microsoft, language 0x409, Copyright 2011 Google Inc. All Rights Reserved.Roboto MediumRegularVersion 2.137; 2017Roboto-Med","md5":"68ea4734cf86bd544650aee05137d7bb","sha1":"3c6a09fcc6a454924c81af7dff94fc6d399ed79b","sha256":"9d0d55a303bfd13b79a87721f65185e93f235e2d77fe398b2dca67ac519915f5","sha512":"5d55a41b845f3a3ae9b08cee5258348dfd83dac5f0a0e48159cd85c141c614a02f8f474fa683d2bfbc451d49dd3b749820662d403b2e3fd3f16a242eaca64115","ssdeep":"3072:wqmtn5wkex8r6Qym7KCkygAKuXylCC9ptSUXl8j/6afWRCgqdhASD/80/:n25wklN7T3QtSUXz7XfST80/","tlshash":"73f3d701d241bf25cac6b6787c7c93be4cb5e41abc4aa52730d9ab3159c8805ec58bfd","first_seen":"2023-04-05T23:29:00Z","last_seen":"2026-08-05T02:51:51.575703Z","times_seen":2092,"resource_available":false,"data":null}},"time_used":205,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":84,"receive":121,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-11","alert":"Sinkholed","trigger":"marulabet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"marulabet.com/_next/static/chunks/c17055ddeccc4769.js","fqdn":"marulabet.com","domain":"marulabet.com","tld":"com"},"ip":{"addr":"104.21.14.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://marulabet.com/","date":"2026-01-11T02:02:20.410Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"marulabet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Dec 2025 13:13:09 GMT","end":"Mon, 30 Mar 2026 14:11:58 GMT"},"fingerprint":{"sha1":"FA:EA:E7:29:47:4D:0C:8A:97:DE:34:6B:B0:73:EC:0F:02:FE:A8:70","sha256":"70:01:CE:F8:9D:67:13:DC:31:37:03:2C:22:AB:68:81:D6:DE:0C:E8:5F:F1:92:32:46:D8:04:E1:9A:38:2E:AD"}}},"request":{"raw":"GET /_next/static/chunks/c17055ddeccc4769.js HTTP/1.1\r\nHost: marulabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://marulabet.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 11 Jan 2026 02:02:20 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Wed, 07 Jan 2026 17:32:54 GMT\r\netag: W/\"6db0-19b9984c570\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vDWrQuIb9rIr7YV6QTcCLoppN49prWGGLaFB5U%2BK2oD6HBQL1M3ran3QWdqq5DXBCf3eqEfhVJ3ZNJPnpQ7gRzP7AGR%2BUz05gVBy\"}]}\r\ncf-ray: 9bc0d4d4f82056ae-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":28080,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (27723)","md5":"25332d144147555b7f44528778390a69","sha1":"d6e66b44641b13b91e71bbafa133c7336bbbc10c","sha256":"cebe10f36d08e7eaced4fd3893763dfeda0f0bf7f5b4596966af9192f066e1cd","sha512":"4ca9da9c06736f2efc165f84e89cf630f8e809dcd2da5b973984f5879e81b399cb6060c15496cbd17cf722ac0ef9fb9c97b927d4938c89c46e212da755793dee","ssdeep":"768:sP3bSN/ZVgBc/Vjz9/ZVvYTV0bp5IXr5If/:a3bSNTt9/TAR0bp56r5Q/","tlshash":"8ac23bd072097db8669f41de9129510c7b3d2b61d10f6c24f6b988be13a8fd07097bae","first_seen":"2026-01-11T01:55:53.424299Z","last_seen":"2026-01-11T02:03:05.497538Z","times_seen":2,"resource_available":false,"data":null}},"time_used":110,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":70,"receive":40,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-11","alert":"Sinkholed","trigger":"marulabet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"marulabet.com/_next/static/chunks/5b4c38a1263b182c.js","fqdn":"marulabet.com","domain":"marulabet.com","tld":"com"},"ip":{"addr":"104.21.14.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://marulabet.com/","date":"2026-01-11T02:02:20.420Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"marulabet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Dec 2025 13:13:09 GMT","end":"Mon, 30 Mar 2026 14:11:58 GMT"},"fingerprint":{"sha1":"FA:EA:E7:29:47:4D:0C:8A:97:DE:34:6B:B0:73:EC:0F:02:FE:A8:70","sha256":"70:01:CE:F8:9D:67:13:DC:31:37:03:2C:22:AB:68:81:D6:DE:0C:E8:5F:F1:92:32:46:D8:04:E1:9A:38:2E:AD"}}},"request":{"raw":"GET /_next/static/chunks/5b4c38a1263b182c.js HTTP/1.1\r\nHost: marulabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://marulabet.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 11 Jan 2026 02:02:20 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Sat, 27 Dec 2025 18:15:15 GMT\r\netag: W/\"14f0-19b61059738\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8SZpLjP8BJGiRy04ODSDxOoq8UZXKHRhgWkjUBt3j5%2FXmy3jlIXJRYIDKXaKhib87CwrtJy%2FdWrFrZcu4qsyhZhA5U48Y%2Fdlvqz0\"}]}\r\ncf-ray: 9bc0d4d4f82756ae-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5360,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (5003)","md5":"f8e9ec1997bd5d30fc21d00e4ead8870","sha1":"204eb1cf4545e0065728e78078f652c93127da73","sha256":"f2ad2659ebf3d8c610e1d765790329fb17c236fc2cce6bd92041802c1f8446fd","sha512":"37dba0ba6cb75187896c36a05d8ba09efc92dbcf9be03b47a1a4840378161d97b3a9fd1928ee668c4794dbda8d37a7dd72e66ded40f9180d5af18d433f199748","ssdeep":"96:GDj0znt1HChTQV4+NBBBKrTukNYx5bLOPtFffaFAbkqiWFTTGD/TMAI:aoz7HCcBQc2VFffaebkqDQw","tlshash":"98b134d4911c42bc985523a8522ad843635d10ff35bb5ea4d9afce60a2c74cce2a74db","first_seen":"2026-01-11T01:55:53.429255Z","last_seen":"2026-02-19T17:02:28.608647Z","times_seen":73,"resource_available":true,"data":null}},"time_used":85,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":74,"receive":11,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-11","alert":"Sinkholed","trigger":"marulabet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"marulabet.com/_next/static/chunks/8d97a31a2b7bb52b.js","fqdn":"marulabet.com","domain":"marulabet.com","tld":"com"},"ip":{"addr":"104.21.14.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://marulabet.com/","date":"2026-01-11T02:02:20.422Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"marulabet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Dec 2025 13:13:09 GMT","end":"Mon, 30 Mar 2026 14:11:58 GMT"},"fingerprint":{"sha1":"FA:EA:E7:29:47:4D:0C:8A:97:DE:34:6B:B0:73:EC:0F:02:FE:A8:70","sha256":"70:01:CE:F8:9D:67:13:DC:31:37:03:2C:22:AB:68:81:D6:DE:0C:E8:5F:F1:92:32:46:D8:04:E1:9A:38:2E:AD"}}},"request":{"raw":"GET /_next/static/chunks/8d97a31a2b7bb52b.js HTTP/1.1\r\nHost: marulabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://marulabet.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 11 Jan 2026 02:02:20 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Mon, 29 Dec 2025 21:07:15 GMT\r\netag: W/\"c2b2-19b6befc7b8\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9riz8%2FAR2qxGhXDRiIr27FIouBUgcaVFZhh41H00G5wEh0ycE4kNbJLfeFoegAvnDC5UyfGuim9Ik%2BGN9w16r2WztY8PHTaYuFPC\"}]}\r\ncf-ray: 9bc0d4d5082956ae-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":49842,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (49485)","md5":"7a6782562784798052f56f3f546edd76","sha1":"5ca984010f470a582d3d61937aa02edd1f2895cc","sha256":"eff3ee36a789baceced46592cfdf60b6b5c83bf5d7031b9e7789b45ba2e99314","sha512":"cd75a77848a365e4580e7897c2c9f6ce89280556a892969406e4219da7dac8e1d56ddb9578ed3b04593af3ba8a141294203fcc2a3366261d661ede7ac6ee41f8","ssdeep":"768:0VfQIsNtn3lErrOfQHL099txV8zlutf8uTpfQlTWH228qz9x/:kQXxSrS9LV8s8u9QIl","tlshash":"6e237484b7a5b02947a25191045b544bf278f938a4cc18acf360e4f628baddad4fff74","first_seen":"2026-01-11T01:55:53.523305Z","last_seen":"2026-02-19T17:02:28.656397Z","times_seen":73,"resource_available":true,"data":null}},"time_used":101,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":71,"receive":30,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-11","alert":"Sinkholed","trigger":"marulabet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"marulabet.com/icons/coinsIcons/trx.svg","fqdn":"marulabet.com","domain":"marulabet.com","tld":"com"},"ip":{"addr":"104.21.14.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://marulabet.com/","date":"2026-01-11T02:02:21.006Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"marulabet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Dec 2025 13:13:09 GMT","end":"Mon, 30 Mar 2026 14:11:58 GMT"},"fingerprint":{"sha1":"FA:EA:E7:29:47:4D:0C:8A:97:DE:34:6B:B0:73:EC:0F:02:FE:A8:70","sha256":"70:01:CE:F8:9D:67:13:DC:31:37:03:2C:22:AB:68:81:D6:DE:0C:E8:5F:F1:92:32:46:D8:04:E1:9A:38:2E:AD"}}},"request":{"raw":"GET /icons/coinsIcons/trx.svg HTTP/1.1\r\nHost: marulabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://marulabet.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 11 Jan 2026 02:02:21 GMT\r\ncontent-type: image/svg+xml\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4%2BKL6sm6I5%2FWKwrrWbVjy35ZPqvbg%2Fx%2BYnA0zXCfIKPj1sVBl%2FhgkLbeHRLv5n3Hij1MbvKV1L8SK1pRTcLM4aIXyjATzDZriOIh\"}]}\r\npriority: u=4,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: br\r\nlast-modified: Sat, 27 Dec 2025 17:40:04 GMT\r\netag: W/\"308-19b60e56411\"\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9bc0d4d9385156ae-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":776,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"2cc6f9ef8a8c752746119acda99d536c","sha1":"7b6966840c33003efe210916d2b75842163a5cfe","sha256":"96d709690be777207b84ed05ff6a3fea97a48ce3c7e8f38e14b3fab56faf783a","sha512":"d441935659c61d0b8f00c240bf9adf652450ee0603b5a025c79b49a555c81f22982cfd24820316d296fe6571ee378b45ab75df19dbbe216249ce52510130816b","ssdeep":"","tlshash":"e501259c67cb703959249343da1630dc6a2a70f44b488328ff9013157b58c73d91a78c","first_seen":"2026-01-11T01:55:53.505628Z","last_seen":"2026-02-01T16:58:56.252486Z","times_seen":3,"resource_available":false,"data":null}},"time_used":59,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":59,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-11","alert":"Sinkholed","trigger":"marulabet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"marulabet.com/second-design/home/promo1.webp","fqdn":"marulabet.com","domain":"marulabet.com","tld":"com"},"ip":{"addr":"104.21.14.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://marulabet.com/","date":"2026-01-11T02:02:23.368Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"marulabet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Dec 2025 13:13:09 GMT","end":"Mon, 30 Mar 2026 14:11:58 GMT"},"fingerprint":{"sha1":"FA:EA:E7:29:47:4D:0C:8A:97:DE:34:6B:B0:73:EC:0F:02:FE:A8:70","sha256":"70:01:CE:F8:9D:67:13:DC:31:37:03:2C:22:AB:68:81:D6:DE:0C:E8:5F:F1:92:32:46:D8:04:E1:9A:38:2E:AD"}}},"request":{"raw":"GET /second-design/home/promo1.webp HTTP/1.1\r\nHost: marulabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://marulabet.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 11 Jan 2026 02:02:23 GMT\r\ncontent-type: image/webp\r\ncontent-length: 8944\r\npriority: u=4,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Thu, 01 Jan 2026 21:01:32 GMT\r\netag: W/\"22f0-19b7b5d9fe0\"\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=42xb67rNMNgOO%2FJXAoaTnk3kVtOdWJDpX6N9XQH%2Fy0qi%2B9%2BCXRMUCe8s3UEVNB3shgaoEEjOs0xIPKgoIFjEkmxCHy4Yleb04R7f\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9bc0d4e8089556ae-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8944,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"2b8130a91fb4c5a77bab53ac79c0d1a4","sha1":"69d9ffa75456675f8ea57bd2e63c92c28cb9e418","sha256":"d55c522b42c801b1d691f66a300b86f5d63453f56ec6cc13eff9a4e59c680fe6","sha512":"948adc9e24f539d7318b094c262e885d65a38ea348ee8cd533c40c646be5c12adf899efb4495060dfd289687f9ce2d818474a8bcd1f055e080088348eda78575","ssdeep":"192:igWb2C6F5XTxWaehYqbPay5DmmHKMaYU2UWzqTGWAF:igWKC6HX10NbP55BRJU2UWkRW","tlshash":"c102af4fd4a89b154924b2bccae79746e00dbeb85a251f683c6cf4eef625102901cfd5","first_seen":"2026-01-11T01:55:53.489214Z","last_seen":"2026-02-19T17:02:28.760725Z","times_seen":73,"resource_available":false,"data":null}},"time_used":57,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":57,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-11","alert":"Sinkholed","trigger":"marulabet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"marulabet.com/second-design/ranks/bronze4.webp","fqdn":"marulabet.com","domain":"marulabet.com","tld":"com"},"ip":{"addr":"104.21.14.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://marulabet.com/","date":"2026-01-11T02:02:23.775Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"marulabet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Dec 2025 13:13:09 GMT","end":"Mon, 30 Mar 2026 14:11:58 GMT"},"fingerprint":{"sha1":"FA:EA:E7:29:47:4D:0C:8A:97:DE:34:6B:B0:73:EC:0F:02:FE:A8:70","sha256":"70:01:CE:F8:9D:67:13:DC:31:37:03:2C:22:AB:68:81:D6:DE:0C:E8:5F:F1:92:32:46:D8:04:E1:9A:38:2E:AD"}}},"request":{"raw":"GET /second-design/ranks/bronze4.webp HTTP/1.1\r\nHost: marulabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://marulabet.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 11 Jan 2026 02:02:23 GMT\r\ncontent-type: image/webp\r\ncontent-length: 6582\r\npriority: u=4,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Sat, 27 Dec 2025 17:40:05 GMT\r\netag: W/\"19b6-19b60e56679\"\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3P414ZOAWpoEMxkx%2B%2FSAzKUyyN3YzhjlecdahQHD3ok8gwAnhmdTOWntKKMJHSAJxxVxhqv8kEM8lRbb3GE3RY6HhigUyTqDlzTv\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9bc0d4ea88af56ae-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6582,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"2a153962749a5459ac17875a0baff838","sha1":"bc29c37a2ffdbe7656dd9e9ede3a21908038a17b","sha256":"ba213d43d47ebdea2c5b427b4b2ae52909634ab1c93b0314a56f43d6d151c88c","sha512":"685f2826ee3405662169d931fe00d56574f960af891d081083baf3967f0bdc4a03b926f3756b8959da06d0b37d51af0b1385304025a0d67fe99018b18e7c797e","ssdeep":"192:Bnl1O9Y51wWSQN8/4JFxTYiCDXJAR3qsfK73qSv:BlU9YX6/4Px0iC8fK7aSv","tlshash":"a1d18f5d6c4b1532ac478653aeeb9b4017f29c82172ae7cfc2221abdcef185426d6423","first_seen":"2026-01-11T02:03:05.502475Z","last_seen":"2026-02-19T17:02:28.792123Z","times_seen":27,"resource_available":false,"data":null}},"time_used":80,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":78,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-11","alert":"Sinkholed","trigger":"marulabet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"marulabet.com/api/socket.io/?EIO=4\u0026transport=polling\u0026t=39o18ffj\u0026sid=Ppq5ZA92h5AuiYkIAl0Q","fqdn":"marulabet.com","domain":"marulabet.com","tld":"com"},"ip":{"addr":"104.21.14.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://marulabet.com/","date":"2026-01-11T02:02:22.411Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"marulabet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Dec 2025 13:13:09 GMT","end":"Mon, 30 Mar 2026 14:11:58 GMT"},"fingerprint":{"sha1":"FA:EA:E7:29:47:4D:0C:8A:97:DE:34:6B:B0:73:EC:0F:02:FE:A8:70","sha256":"70:01:CE:F8:9D:67:13:DC:31:37:03:2C:22:AB:68:81:D6:DE:0C:E8:5F:F1:92:32:46:D8:04:E1:9A:38:2E:AD"}}},"request":{"raw":"GET /api/socket.io/?EIO=4\u0026transport=polling\u0026t=39o18ffj\u0026sid=Ppq5ZA92h5AuiYkIAl0Q HTTP/1.1\r\nHost: marulabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAuthorization: undefined\r\nsentry-trace: 9ffef7b14fef40b3bd2e466e13219bb9-a3d22b3bfb3d84ca-0\r\nbaggage: sentry-environment=production,sentry-release=web%402.7.0,sentry-public_key=6d319d1014d598ea4a0365923853ee67,sentry-trace_id=9ffef7b14fef40b3bd2e466e13219bb9,sentry-sampled=false,sentry-sample_rand=0.22013458521750728,sentry-sample_rate=0.1\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://marulabet.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 11 Jan 2026 02:02:22 GMT\r\ncontent-type: text/plain; charset=UTF-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dzposzAKBUGLFxKEVX4YJVnx2gCSVbxBDSWhYRM9gYFJin8nppFAQUTQJRcZ5KioU28rrtRjfWKXW3D5fipj74wMQtswGjh%2B7E89\"}]}\r\npriority: u=3,i=?0\r\naccess-control-allow-origin: *\r\ncache-control: no-store\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9bc0d4e2087f56ae-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":32,"size_decoded":0,"mime_type":"text/plain; charset=UTF-8","magic":"ASCII text, with no line terminators","md5":"58e750c8ba33f7a812d4f80d0f114d9f","sha1":"f27f3fd5f1cfe83a3b629b8db70a09d9f3ee91d7","sha256":"166b06985d09517a84c3ab333311ed1d77df94b51b3944dc3a5a273d2a5ddad4","sha512":"afabbd98af841b4ef0302d891f79a4dc4bf69c3966689eeb592d9113fab900305b04b6b83767afaf71bea7768a44641b70b88930fdeab20acf8c08e3a66560e2","ssdeep":"","tlshash":"108000a30023208008888232202a32200e200080f0c82f8ae8af2a8c00030022282022","first_seen":"2026-01-11T02:03:05.503759Z","last_seen":"2026-01-11T02:03:05.503759Z","times_seen":1,"resource_available":false,"data":null}},"time_used":83,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":83,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-11","alert":"Sinkholed","trigger":"marulabet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"marulabet.com/_next/static/media/DMSans_Medium-s.p.4f631073.ttf","fqdn":"marulabet.com","domain":"marulabet.com","tld":"com"},"ip":{"addr":"104.21.14.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://marulabet.com/","date":"2026-01-11T02:02:20.318Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"marulabet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Dec 2025 13:13:09 GMT","end":"Mon, 30 Mar 2026 14:11:58 GMT"},"fingerprint":{"sha1":"FA:EA:E7:29:47:4D:0C:8A:97:DE:34:6B:B0:73:EC:0F:02:FE:A8:70","sha256":"70:01:CE:F8:9D:67:13:DC:31:37:03:2C:22:AB:68:81:D6:DE:0C:E8:5F:F1:92:32:46:D8:04:E1:9A:38:2E:AD"}}},"request":{"raw":"GET /_next/static/media/DMSans_Medium-s.p.4f631073.ttf HTTP/1.1\r\nHost: marulabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://marulabet.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 11 Jan 2026 02:02:20 GMT\r\ncontent-type: font/ttf\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Wed, 07 Jan 2026 18:59:37 GMT\r\netag: W/\"dc3c-19b99d429a8\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1idGO2JfskPhwvX5wAlrU2RdGZ0%2Fmf%2FM16a2wI7givCCkUK8rU4ga29VQr5cCfCHAVUHK%2BDiZPFIA2KUWVC2Ut20WjF8%2B5aMHt4Y\"}]}\r\ncf-ray: 9bc0d4d4aff956ae-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":56380,"size_decoded":0,"mime_type":"font/ttf","magic":"TrueType Font data, 16 tables, 1st \"GDEF\", 44 names, Microsoft, language 0x409","md5":"6244219cea1110e6ec49e950f070acf8","sha1":"00ea5b83c109e751b844413d32e21b7689bf786d","sha256":"32c8fe1874433bd34674ef1b58037fdb7d1b245d5844076c76c6f3a2c69d6840","sha512":"151abea1c586541b2ee6fdbffea8dc7046027b37599092acba6a6a89873501ac3cd2f459a58df5be30b677bc252b4031fc4c9b4e9b5649a30786682c28243bbe","ssdeep":"768:ejiwYeGvU7ifzsu/ma5tBMPxmMu4mjtpg9IfypSe59QQZayKRgJDE/T+:ejD7eQ8dGZm14/m059QQo1RgJDEy","tlshash":"bf435d42f7158a0dd2836ebc846383f4b777fc34fea2839b5179ab2aed490a14c11384","first_seen":"2023-11-01T17:45:54Z","last_seen":"2026-07-30T14:11:56.991838Z","times_seen":461,"resource_available":false,"data":null}},"time_used":189,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":79,"receive":110,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-11","alert":"Sinkholed","trigger":"marulabet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"marulabet.com/_next/static/media/Inter_SemiBold-s.p.b21f16b2.ttf","fqdn":"marulabet.com","domain":"marulabet.com","tld":"com"},"ip":{"addr":"104.21.14.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://marulabet.com/","date":"2026-01-11T02:02:20.356Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"marulabet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Dec 2025 13:13:09 GMT","end":"Mon, 30 Mar 2026 14:11:58 GMT"},"fingerprint":{"sha1":"FA:EA:E7:29:47:4D:0C:8A:97:DE:34:6B:B0:73:EC:0F:02:FE:A8:70","sha256":"70:01:CE:F8:9D:67:13:DC:31:37:03:2C:22:AB:68:81:D6:DE:0C:E8:5F:F1:92:32:46:D8:04:E1:9A:38:2E:AD"}}},"request":{"raw":"GET /_next/static/media/Inter_SemiBold-s.p.b21f16b2.ttf HTTP/1.1\r\nHost: marulabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://marulabet.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 11 Jan 2026 02:02:20 GMT\r\ncontent-type: font/ttf\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Tue, 23 Dec 2025 14:08:10 GMT\r\netag: W/\"65118-19b4b89f110\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tNpOwdb14KOsgQZXN8FQ7HHgtAV9j3Oe0%2BySQ7fhNmS7VgPmHbUghxGaYa%2FydV7Dm3qhUQbQyToJZ2KrDd%2FnygiwGtGTnEhzjjWo\"}]}\r\ncf-ray: 9bc0d4d4b80056ae-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":413976,"size_decoded":0,"mime_type":"font/ttf","magic":"TrueType Font data, 17 tables, 1st \"GDEF\", 39 names, Microsoft, language 0x409, Copyright 2016 The Inter Project AuthorsInter SemiBoldRegular4.000;git-a52131595;RSMS;Inter-Semi","md5":"4d24f378e7f8656a5bccb128265a6c3d","sha1":"d48310d2f04c57af1bce0851e053be7b58b25dca","sha256":"0dc98e8aa59585394880f25ab89e6d915ad5134522e961b046ca51fad3a18255","sha512":"38b18d9786046633e4992308c88f11ca5ced325f805eb29b3000533459e85dfb6cd87655f1e285af8da22ac04722ab354dbda24667297b56cca824ef227373f1","ssdeep":"12288:SMPc0C2wQtzPziKFfAi2bNru42U5CB1c8:5hiK9AiENr/2UYc8","tlshash":"f9946b17e705d71ecd1a2d348af58bd033b9bc90b91ee24bb05a3a09dd971f00a9b5e1","first_seen":"2024-06-16T04:57:18Z","last_seen":"2026-08-04T16:44:03.343662Z","times_seen":286,"resource_available":false,"data":null}},"time_used":248,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":147,"receive":101,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-11","alert":"Sinkholed","trigger":"marulabet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"marulabet.com/_next/static/chunks/2349889433227e69.js","fqdn":"marulabet.com","domain":"marulabet.com","tld":"com"},"ip":{"addr":"104.21.14.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://marulabet.com/","date":"2026-01-11T02:02:20.461Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"marulabet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Dec 2025 13:13:09 GMT","end":"Mon, 30 Mar 2026 14:11:58 GMT"},"fingerprint":{"sha1":"FA:EA:E7:29:47:4D:0C:8A:97:DE:34:6B:B0:73:EC:0F:02:FE:A8:70","sha256":"70:01:CE:F8:9D:67:13:DC:31:37:03:2C:22:AB:68:81:D6:DE:0C:E8:5F:F1:92:32:46:D8:04:E1:9A:38:2E:AD"}}},"request":{"raw":"GET /_next/static/chunks/2349889433227e69.js HTTP/1.1\r\nHost: marulabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://marulabet.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 11 Jan 2026 02:02:20 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Sat, 27 Dec 2025 18:15:14 GMT\r\netag: W/\"10b33-19b61059350\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1UQiig5dx9bT%2Bbi952hbtHSXXTiUx9mNFrJdX%2Fwe1NkmM6xFNqPK51brBCCxzZpvN3Rr%2Fr2x6AhecXvc3KK690LsbWJ6i%2B3hhK9W\"}]}\r\ncf-ray: 9bc0d4d5483756ae-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":68403,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (60216)","md5":"78bce7ce7acfc3881e181f458e56e281","sha1":"31b0a2cee84238768b19d60f5bbe95073f85f927","sha256":"bb5a1ecce51f1568ea7b8136da53386bf996288fcd864ec646ba176b5b858af0","sha512":"3dcc827162e8eda233878321092245d82f2eb30c1f09cbeaaedc63426ff11efef495f99064aefcb610277b3bfb0266890fe6ebcfa75ea538d8d58f5c55f1f96c","ssdeep":"768:giSpd5w4FuUe/y1xxzgxk93gtaKoYYS221frDQUkP/M6+rueVutcc9m4V:ZYAymxktgtDDQUkP/M6+ueVuZ1V","tlshash":"dc636c63324228f65bdf42c6e02e8606e33915d6900d4124f7aa5c3a5b61fe890e7f2f","first_seen":"2026-01-11T01:55:53.41201Z","last_seen":"2026-02-19T17:02:28.846589Z","times_seen":73,"resource_available":true,"data":null}},"time_used":93,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":65,"receive":28,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-11","alert":"Sinkholed","trigger":"marulabet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"marulabet.com/games_new_webp/pragmatic-play-koi-pond.webp","fqdn":"marulabet.com","domain":"marulabet.com","tld":"com"},"ip":{"addr":"104.21.14.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://marulabet.com/","date":"2026-01-11T02:02:23.750Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"marulabet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Dec 2025 13:13:09 GMT","end":"Mon, 30 Mar 2026 14:11:58 GMT"},"fingerprint":{"sha1":"FA:EA:E7:29:47:4D:0C:8A:97:DE:34:6B:B0:73:EC:0F:02:FE:A8:70","sha256":"70:01:CE:F8:9D:67:13:DC:31:37:03:2C:22:AB:68:81:D6:DE:0C:E8:5F:F1:92:32:46:D8:04:E1:9A:38:2E:AD"}}},"request":{"raw":"GET /games_new_webp/pragmatic-play-koi-pond.webp HTTP/1.1\r\nHost: marulabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://marulabet.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 11 Jan 2026 02:02:23 GMT\r\ncontent-type: image/webp\r\ncontent-length: 38068\r\npriority: u=4,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Thu, 01 Jan 2026 18:08:45 GMT\r\netag: W/\"94b4-19b7abf6fc8\"\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Wyl3aXX%2Bs7L%2BygfX96LEVgMyN1wjTke9yez1Ixy86pF17WuLuTZUaif8gnG3%2FCkwTnmglVZpYu%2FkNWW0%2BI45HRqRtCP7sIx5UodK\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9bc0d4ea68a656ae-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":38068,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 408x546, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"e6f44f879f9e7649bf32f290e902b43e","sha1":"d0a924b6737cf2b7f12e7aa8c0b23a72fdac6442","sha256":"4c0540cf3cdafa29032eff98a4cd2ff7c2987176002c2dae34acb44f0882a3da","sha512":"5db929c2ad9722aaf904d8ffd730a04682b6888b6b38c948e937f59c5833372f998bc7fa22eec20b5f890c11efa4b55284d206e94a0b7fb2acfa9a68cc3e038d","ssdeep":"768:CWadnAjZUIFnsq7KuzWiU38l2eHrSUWH4b+YWOud3NUc3fFRQ4o:StmKIZuheHNWH4b+su//a9","tlshash":"bc03f15ecfa90a44defdff6b51c1c80668db5860bca5d13e3853aa06495fcb109e902f","first_seen":"2026-01-11T02:03:05.50704Z","last_seen":"2026-01-11T02:03:05.50704Z","times_seen":1,"resource_available":false,"data":null}},"time_used":77,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":66,"receive":11,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-11","alert":"Sinkholed","trigger":"marulabet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"marulabet.com/games_new_webp/hacksaw-ruby-rush.webp","fqdn":"marulabet.com","domain":"marulabet.com","tld":"com"},"ip":{"addr":"104.21.14.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://marulabet.com/","date":"2026-01-11T02:02:23.802Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"marulabet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Dec 2025 13:13:09 GMT","end":"Mon, 30 Mar 2026 14:11:58 GMT"},"fingerprint":{"sha1":"FA:EA:E7:29:47:4D:0C:8A:97:DE:34:6B:B0:73:EC:0F:02:FE:A8:70","sha256":"70:01:CE:F8:9D:67:13:DC:31:37:03:2C:22:AB:68:81:D6:DE:0C:E8:5F:F1:92:32:46:D8:04:E1:9A:38:2E:AD"}}},"request":{"raw":"GET /games_new_webp/hacksaw-ruby-rush.webp HTTP/1.1\r\nHost: marulabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://marulabet.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 11 Jan 2026 02:02:23 GMT\r\ncontent-type: image/webp\r\ncontent-length: 10014\r\npriority: u=4,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Thu, 01 Jan 2026 18:08:22 GMT\r\netag: W/\"271e-19b7abf15f0\"\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZeaalX3j5oWlft8TCeAcnBksX%2FzgsFGoDdTJYTtM6DUOoE9a7qlK2ggcxuix%2F%2FgvNsH9xZVDldtIgqn1K3%2FzEMycB4dNiowlukjx\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9bc0d4eaa8b756ae-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10014,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 180x236, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"8a5c17b23aeb2d9284e177a99ff9b64d","sha1":"8cec6f3e6f3cac6c42952392f55f9774cb8302f5","sha256":"7ff8a2a5c71fda57003c6bf93536f77dc0f9c1c1549ed5862f4e6b864bd9f5b4","sha512":"99afe687e4607897b0f21affa4fc5d2e0d77c98b88d250eabc4a917f392964fef9554572fcfd8e2fd3eb3c1bd69f2d24fb9a711c0c7a803f1df71e7c43eafa7c","ssdeep":"192:dkT2ept70VQ9BzFbO9S9IauNV67/PaLbt4uBASFplXeYSt+w7ts:ZeHw05AYKaCFJ4ZSFpluYSs6ts","tlshash":"ca22bfb71c9970d3d43e182380260787de0e133b859eef4dc359e5eeaa2860c5e882b4","first_seen":"2026-01-11T02:03:05.508231Z","last_seen":"2026-01-11T02:03:05.508231Z","times_seen":1,"resource_available":false,"data":null}},"time_used":63,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":63,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-11","alert":"Sinkholed","trigger":"marulabet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"marulabet.com/group/slots?_rsc=r54j0","fqdn":"marulabet.com","domain":"marulabet.com","tld":"com"},"ip":{"addr":"104.21.14.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://marulabet.com/","date":"2026-01-11T02:02:23.822Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"marulabet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Dec 2025 13:13:09 GMT","end":"Mon, 30 Mar 2026 14:11:58 GMT"},"fingerprint":{"sha1":"FA:EA:E7:29:47:4D:0C:8A:97:DE:34:6B:B0:73:EC:0F:02:FE:A8:70","sha256":"70:01:CE:F8:9D:67:13:DC:31:37:03:2C:22:AB:68:81:D6:DE:0C:E8:5F:F1:92:32:46:D8:04:E1:9A:38:2E:AD"}}},"request":{"raw":"GET /group/slots?_rsc=r54j0 HTTP/1.1\r\nHost: marulabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://marulabet.com/\r\nrsc: 1\r\nnext-router-prefetch: 1\r\nnext-router-segment-prefetch: /_tree\r\nnext-url: /marulabet.com%26blue%26en/second-design\r\nsentry-trace: 9ffef7b14fef40b3bd2e466e13219bb9-abffe317046a5eb5-0\r\nbaggage: sentry-environment=production,sentry-release=web%402.7.0,sentry-public_key=6d319d1014d598ea4a0365923853ee67,sentry-trace_id=9ffef7b14fef40b3bd2e466e13219bb9,sentry-sampled=false,sentry-sample_rand=0.22013458521750728,sentry-sample_rate=0.1\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 11 Jan 2026 02:02:23 GMT\r\ncontent-type: text/x-component\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nx-nextjs-rewritten-path: /marulabet.com\u0026blue\u0026en/second-design/group/slots\r\nx-middleware-rewrite: /marulabet.com\u0026blue\u0026en/second-design/group/slots?_rsc=r54j0\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch, Accept-Encoding\r\nx-nextjs-cache: HIT\r\nx-nextjs-prerender: 1\r\nx-nextjs-postponed: 2\r\ncache-control: s-maxage=600, stale-while-revalidate=31535400\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JI9YERtyV5fYf1oNoRcMn7bm2VtpQMIK9e45vdCD%2Bv%2FutuEvG5fRoBJ%2B%2BPTfg36wAXy%2Bf37kq5hJkzyxgfn5AdImpbt6%2Bdt%2BW1%2BH\"}]}\r\ncf-ray: 9bc0d4eac8c156ae-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2576,"size_decoded":0,"mime_type":"text/x-component","magic":"ASCII text, with very long lines (1067)","md5":"612d1532e120245d35e41bdf875ed343","sha1":"32b835c6f9f141d383e4e132e32fb0f9e499c8e4","sha256":"2521d32d516a61bbb1058711bcaeb62b8046d2d09fd9834a03d466a10a560678","sha512":"5f1348e1e78e367eea1e8174c8a674dca98b39025121459e5925d5233c0d83a5acaf46edb9b90d8fba39b3e0cf93bc3c15a271e836df186ec6b95cd0518d1d21","ssdeep":"","tlshash":"0651af0cc8486db498d9d59962d5d7016654af3bf1b88cbce04bdc54138f03d0baab87","first_seen":"2026-01-11T02:03:05.51001Z","last_seen":"2026-01-11T02:03:05.51001Z","times_seen":1,"resource_available":false,"data":null}},"time_used":107,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":107,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-11","alert":"Sinkholed","trigger":"marulabet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"marulabet.com/?action=register\u0026_rsc=1rrmm","fqdn":"marulabet.com","domain":"marulabet.com","tld":"com"},"ip":{"addr":"104.21.14.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://marulabet.com/","date":"2026-01-11T02:02:24.114Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"marulabet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Dec 2025 13:13:09 GMT","end":"Mon, 30 Mar 2026 14:11:58 GMT"},"fingerprint":{"sha1":"FA:EA:E7:29:47:4D:0C:8A:97:DE:34:6B:B0:73:EC:0F:02:FE:A8:70","sha256":"70:01:CE:F8:9D:67:13:DC:31:37:03:2C:22:AB:68:81:D6:DE:0C:E8:5F:F1:92:32:46:D8:04:E1:9A:38:2E:AD"}}},"request":{"raw":"GET /?action=register\u0026_rsc=1rrmm HTTP/1.1\r\nHost: marulabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://marulabet.com/\r\nrsc: 1\r\nnext-router-prefetch: 1\r\nnext-router-segment-prefetch: /!KHVzZXItc2lkZSk/$d$M/second-design\r\nnext-url: /marulabet.com%26blue%26en/second-design\r\nsentry-trace: 9ffef7b14fef40b3bd2e466e13219bb9-88ff8fd51a9882b4-0\r\nbaggage: sentry-environment=production,sentry-release=web%402.7.0,sentry-public_key=6d319d1014d598ea4a0365923853ee67,sentry-trace_id=9ffef7b14fef40b3bd2e466e13219bb9,sentry-sampled=false,sentry-sample_rand=0.22013458521750728,sentry-sample_rate=0.1\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 11 Jan 2026 02:02:24 GMT\r\ncontent-type: text/x-component\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nx-nextjs-rewritten-path: /marulabet.com\u0026blue\u0026en/second-design\r\nx-nextjs-rewritten-query: action=register\r\nx-middleware-rewrite: /marulabet.com\u0026blue\u0026en/second-design?action=register\u0026_rsc=1rrmm\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch, Accept-Encoding\r\nx-nextjs-cache: HIT\r\nx-nextjs-prerender: 1\r\nx-nextjs-postponed: 2\r\ncache-control: s-maxage=600, stale-while-revalidate=31535400\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JN6t6NXGRKckJVYejfFHugxnHmyvPr3KOx53A2jgn0GqQqNDK4vaUxBAPiPw9xHkjzKgLCxrhmdt%2F8E7K9E3VX5bBvpkcEYjf6Yp\"}]}\r\ncf-ray: 9bc0d4ecb8cc56ae-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":82676,"size_decoded":0,"mime_type":"text/x-component","magic":"Unicode text, UTF-8 text, with very long lines (28202)","md5":"b5b8e2cc5973d3e6a85a2633dd9de57b","sha1":"8c26dcf824a60198dcd392d26add03554b4346e5","sha256":"831fbcb5bd6ab237377bdd44dc06f242294f4b8d071de49ee58c533e08fafee6","sha512":"ecf406e48444ededcdb12a382efdcd46d96e0f7c46e29b117b59ac44a4f8ee61cd89ff9207e2b18e2ed14b0fdb702fea81d3abbd8b33f2689facf626f7a8b2f0","ssdeep":"1536:NfEDTjKQqlrFsQvtbmhAzmGlFROc5TXLV80myg:w5qlrFs6bmKmGlFR/57LV80mt","tlshash":"b6831d1bd80eec684d66de9c3c5f5b2796d8887399304c9ceb8dccac029d51b5baa0d1","first_seen":"2026-01-11T02:03:05.511289Z","last_seen":"2026-01-11T02:03:05.511289Z","times_seen":1,"resource_available":false,"data":null}},"time_used":146,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":92,"receive":54,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-11","alert":"Sinkholed","trigger":"marulabet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"marulabet.com/_next/static/media/DMSans_SemiBold-s.p.432e74d4.ttf","fqdn":"marulabet.com","domain":"marulabet.com","tld":"com"},"ip":{"addr":"104.21.14.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://marulabet.com/","date":"2026-01-11T02:02:20.338Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"marulabet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Dec 2025 13:13:09 GMT","end":"Mon, 30 Mar 2026 14:11:58 GMT"},"fingerprint":{"sha1":"FA:EA:E7:29:47:4D:0C:8A:97:DE:34:6B:B0:73:EC:0F:02:FE:A8:70","sha256":"70:01:CE:F8:9D:67:13:DC:31:37:03:2C:22:AB:68:81:D6:DE:0C:E8:5F:F1:92:32:46:D8:04:E1:9A:38:2E:AD"}}},"request":{"raw":"GET /_next/static/media/DMSans_SemiBold-s.p.432e74d4.ttf HTTP/1.1\r\nHost: marulabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://marulabet.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 11 Jan 2026 02:02:20 GMT\r\ncontent-type: font/ttf\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Thu, 25 Dec 2025 14:07:50 GMT\r\netag: W/\"dc14-19b55d65af0\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=psANcmmwNlq9eqA4nG7nOIvvgZLUj6t%2B1ibTquCmNaV652HRdKRmqgOA871AIrBM0fAynRbv7tNeX2QOTJhxaacVhe8dhwVv1rtf\"}]}\r\ncf-ray: 9bc0d4d4affb56ae-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":56340,"size_decoded":0,"mime_type":"font/ttf","magic":"TrueType Font data, 16 tables, 1st \"GDEF\", 44 names, Microsoft, language 0x409","md5":"41de6d553ba4b1825e9cf023e97e2ee4","sha1":"c2c26e18339912a10d796aee9a19ce1aff5177e4","sha256":"cd4f7b027bc8e71a19360a426cd694eb195f6fad4142437047f33b312a8c4e94","sha512":"e6b614a65c7441b5a6967df47b1bac808f8966ed8b43446fe91056235b6797653999b9160172b77bc92c2db35e411a1112e97071dc1ca8ee17a7b288357c6fd4","ssdeep":"768:8sVAWXhIU7ifzsuFE55E5bBvQvbKtdE68fjBzPrloGWJ0j32v6w51:8CXV7eQWbTn8VyGWKyv6wX","tlshash":"a9434ba9b316960dd356babc946373b483b0bd3caef3c35b54b1673aed4d0a14c11289","first_seen":"2023-10-31T22:57:11Z","last_seen":"2026-07-30T14:11:57.001438Z","times_seen":308,"resource_available":false,"data":null}},"time_used":163,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":78,"receive":85,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-11","alert":"Sinkholed","trigger":"marulabet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"marulabet.com/_next/static/chunks/f481d12fa6115376.js","fqdn":"marulabet.com","domain":"marulabet.com","tld":"com"},"ip":{"addr":"104.21.14.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://marulabet.com/","date":"2026-01-11T02:02:20.436Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"marulabet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Dec 2025 13:13:09 GMT","end":"Mon, 30 Mar 2026 14:11:58 GMT"},"fingerprint":{"sha1":"FA:EA:E7:29:47:4D:0C:8A:97:DE:34:6B:B0:73:EC:0F:02:FE:A8:70","sha256":"70:01:CE:F8:9D:67:13:DC:31:37:03:2C:22:AB:68:81:D6:DE:0C:E8:5F:F1:92:32:46:D8:04:E1:9A:38:2E:AD"}}},"request":{"raw":"GET /_next/static/chunks/f481d12fa6115376.js HTTP/1.1\r\nHost: marulabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://marulabet.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 11 Jan 2026 02:02:20 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Sat, 27 Dec 2025 18:15:15 GMT\r\netag: W/\"46ac-19b61059738\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Oc4ugKHIRgY95Tt7IVpCaewxjbgiW7Fk2iIo0J%2BiTGq9w0zo1m%2FkNanhpjXJoB2olrU%2BaaIVlmvF0V9bHnuyfiIN1Wig%2B8qT5dfO\"}]}\r\ncf-ray: 9bc0d4d5183056ae-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":18092,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (17735)","md5":"c4e41c714da5a9df953f2bc887a8be30","sha1":"23b51314442a5d523c045f83e46a8cf27ac8b29b","sha256":"f14145c9cbd9eb49621d7bae4751666c8256d371c32bec3bec537995e913b579","sha512":"a42dc09d57cd64f5b8156cac5a68d4b1f2555eb2021d6fe69bc1b1994547cec0e952745f5ebfaaa6f316f3fb3dc05c8fc82999b496523dc791d4c47875c3af2a","ssdeep":"192:F4SCYqp/cVReSok7GCaTBoypywK89KkKlVqxs9VSi1zPLSGDQma7oZLrBBBZr+c3:F4SU9IReSmoy88vSMAzNNdH/Rx/","tlshash":"be821bb52b54f470e2fe81dec1270829673f3b1e210a5435f17f8ced3924a627256ba9","first_seen":"2026-01-11T01:55:53.525125Z","last_seen":"2026-02-19T17:02:28.607716Z","times_seen":73,"resource_available":true,"data":null}},"time_used":90,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":70,"receive":20,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-11","alert":"Sinkholed","trigger":"marulabet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"marulabet.com/_next/static/chunks/caae717be06ee70a.js","fqdn":"marulabet.com","domain":"marulabet.com","tld":"com"},"ip":{"addr":"104.21.14.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://marulabet.com/","date":"2026-01-11T02:02:20.458Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"marulabet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Dec 2025 13:13:09 GMT","end":"Mon, 30 Mar 2026 14:11:58 GMT"},"fingerprint":{"sha1":"FA:EA:E7:29:47:4D:0C:8A:97:DE:34:6B:B0:73:EC:0F:02:FE:A8:70","sha256":"70:01:CE:F8:9D:67:13:DC:31:37:03:2C:22:AB:68:81:D6:DE:0C:E8:5F:F1:92:32:46:D8:04:E1:9A:38:2E:AD"}}},"request":{"raw":"GET /_next/static/chunks/caae717be06ee70a.js HTTP/1.1\r\nHost: marulabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://marulabet.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 11 Jan 2026 02:02:20 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Sat, 27 Dec 2025 18:15:15 GMT\r\netag: W/\"1c1e-19b61059738\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=uMRQjw9C7NwmGJtl%2FJjgzZCTf0TeaiZfTey6KWMwAmE98PLuGzLYL44gwMVGverHPN9Q8Sg7vlMn%2BGy8ppdWSaLl1QYVg1aVIAgk\"}]}\r\ncf-ray: 9bc0d4d5383556ae-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7198,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (6841)","md5":"e6c94e39c0f64bfd90c336be1cb7b992","sha1":"2065afd686d71c4c062e8883aec6c3731f9856ab","sha256":"67349e75d3d8a57aa71d9e77f82c9e2f86c1dd3569b5291cce6cf262287b0dee","sha512":"21afebf7aaa9201836bfaed3480a08ae3cd14892117714ba5a5f6302ff1cac32525b24252912de8936684a968902670b70a172f9170343d69e234e5d598b99d5","ssdeep":"192:geZektmofqEn26qAXCLmTOfsn+aqFdAVxBUvBHFM+z:geZektmofhnhqAXCLmTOfsn+7FdALB0F","tlshash":"fee1f245e6581761b88842705667f01390ee367f30cf94e8875a86e4e7d689cee238ff","first_seen":"2025-12-31T07:43:06.455788Z","last_seen":"2026-01-11T02:03:05.514683Z","times_seen":3,"resource_available":true,"data":null}},"time_used":74,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":70,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-11","alert":"Sinkholed","trigger":"marulabet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"marulabet.com/_next/static/media/Inter_SemiBold-s.p.b21f16b2.ttf","fqdn":"marulabet.com","domain":"marulabet.com","tld":"com"},"ip":{"addr":"104.21.14.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://marulabet.com/","date":"2026-01-11T02:02:21.679Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"marulabet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Dec 2025 13:13:09 GMT","end":"Mon, 30 Mar 2026 14:11:58 GMT"},"fingerprint":{"sha1":"FA:EA:E7:29:47:4D:0C:8A:97:DE:34:6B:B0:73:EC:0F:02:FE:A8:70","sha256":"70:01:CE:F8:9D:67:13:DC:31:37:03:2C:22:AB:68:81:D6:DE:0C:E8:5F:F1:92:32:46:D8:04:E1:9A:38:2E:AD"}}},"request":{"raw":"GET /_next/static/media/Inter_SemiBold-s.p.b21f16b2.ttf HTTP/1.1\r\nHost: marulabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://marulabet.com/_next/static/chunks/a85c5f2112ae0905.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 11 Jan 2026 02:02:21 GMT\r\ncontent-type: font/ttf\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Tue, 23 Dec 2025 14:08:10 GMT\r\netag: W/\"65118-19b4b89f110\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nage: 1453396\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SU27hi03fx6sMFnZJE%2FOeIQSUJ4gnG5Qe6ku2ffBy80OKnF4wzsN4wbXXqu%2FV2B9DNkleZQOzMPqlo5XkUc7WXQeM8Mj6nvgkIxD\"}]}\r\ncf-ray: 9bc0d4dd886756ae-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":413976,"size_decoded":0,"mime_type":"font/ttf","magic":"TrueType Font data, 17 tables, 1st \"GDEF\", 39 names, Microsoft, language 0x409, Copyright 2016 The Inter Project AuthorsInter SemiBoldRegular4.000;git-a52131595;RSMS;Inter-Semi","md5":"4d24f378e7f8656a5bccb128265a6c3d","sha1":"d48310d2f04c57af1bce0851e053be7b58b25dca","sha256":"0dc98e8aa59585394880f25ab89e6d915ad5134522e961b046ca51fad3a18255","sha512":"38b18d9786046633e4992308c88f11ca5ced325f805eb29b3000533459e85dfb6cd87655f1e285af8da22ac04722ab354dbda24667297b56cca824ef227373f1","ssdeep":"12288:SMPc0C2wQtzPziKFfAi2bNru42U5CB1c8:5hiK9AiENr/2UYc8","tlshash":"f9946b17e705d71ecd1a2d348af58bd033b9bc90b91ee24bb05a3a09dd971f00a9b5e1","first_seen":"2024-06-16T04:57:18Z","last_seen":"2026-08-04T16:44:03.343662Z","times_seen":286,"resource_available":false,"data":null}},"time_used":59,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":51,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-11","alert":"Sinkholed","trigger":"marulabet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"marulabet.com/?action=register\u0026_rsc=1jkk3","fqdn":"marulabet.com","domain":"marulabet.com","tld":"com"},"ip":{"addr":"104.21.14.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://marulabet.com/","date":"2026-01-11T02:02:23.986Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"marulabet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Dec 2025 13:13:09 GMT","end":"Mon, 30 Mar 2026 14:11:58 GMT"},"fingerprint":{"sha1":"FA:EA:E7:29:47:4D:0C:8A:97:DE:34:6B:B0:73:EC:0F:02:FE:A8:70","sha256":"70:01:CE:F8:9D:67:13:DC:31:37:03:2C:22:AB:68:81:D6:DE:0C:E8:5F:F1:92:32:46:D8:04:E1:9A:38:2E:AD"}}},"request":{"raw":"GET /?action=register\u0026_rsc=1jkk3 HTTP/1.1\r\nHost: marulabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://marulabet.com/\r\nrsc: 1\r\nnext-router-prefetch: 1\r\nnext-router-segment-prefetch: /_head\r\nnext-url: /marulabet.com%26blue%26en/second-design\r\nsentry-trace: 9ffef7b14fef40b3bd2e466e13219bb9-9206f0d4b53c42f8-0\r\nbaggage: sentry-environment=production,sentry-release=web%402.7.0,sentry-public_key=6d319d1014d598ea4a0365923853ee67,sentry-trace_id=9ffef7b14fef40b3bd2e466e13219bb9,sentry-sampled=false,sentry-sample_rand=0.22013458521750728,sentry-sample_rate=0.1\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 11 Jan 2026 02:02:24 GMT\r\ncontent-type: text/x-component\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nx-nextjs-rewritten-path: /marulabet.com\u0026blue\u0026en/second-design\r\nx-nextjs-rewritten-query: action=register\r\nx-middleware-rewrite: /marulabet.com\u0026blue\u0026en/second-design?action=register\u0026_rsc=1jkk3\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch, Accept-Encoding\r\nx-nextjs-cache: HIT\r\nx-nextjs-prerender: 1\r\nx-nextjs-postponed: 2\r\ncache-control: s-maxage=600, stale-while-revalidate=31535400\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZPOKVpmK6uxyw9Exm4zTgxeXE7RUpZH5IrOHEuWNsaw8HYkQsKrIi3Mx79P4ox59yHHDKx6TUjoVnNMK60luwR%2BqxVegaRL1bZIj\"}]}\r\ncf-ray: 9bc0d4ebe8c656ae-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1965,"size_decoded":0,"mime_type":"text/x-component","magic":"ASCII text, with very long lines (1444)","md5":"6c421767d164700bb202c9c9dc5a75f1","sha1":"3307eee16bcd0354b14a8bc46fe024d0cfa83dc8","sha256":"1bde8df6c6a1bdd59c977fe118261690fa64a378821417905e1f73dc387b07a4","sha512":"da5bff3cd87a9f3e0299e5382e754348a6ae99f592871f64568466c98ff9a5a02dfcad92dcce2da0a0da9f42d2d0612d95ab29e1815cc95b53a6e4a04ad84467","ssdeep":"","tlshash":"f2410f7a880cec8e5a67c959086ff31a160d1677c6701e7adaaccd0e19c602e5f60f90","first_seen":"2026-01-11T02:03:05.226237Z","last_seen":"2026-01-11T02:03:05.226237Z","times_seen":1,"resource_available":false,"data":null}},"time_used":94,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":94,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-11","alert":"Sinkholed","trigger":"marulabet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"marulabet.com/_next/static/chunks/36fc4d948ba3a225.js","fqdn":"marulabet.com","domain":"marulabet.com","tld":"com"},"ip":{"addr":"104.21.14.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://marulabet.com/","date":"2026-01-11T02:02:24.445Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"marulabet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Dec 2025 13:13:09 GMT","end":"Mon, 30 Mar 2026 14:11:58 GMT"},"fingerprint":{"sha1":"FA:EA:E7:29:47:4D:0C:8A:97:DE:34:6B:B0:73:EC:0F:02:FE:A8:70","sha256":"70:01:CE:F8:9D:67:13:DC:31:37:03:2C:22:AB:68:81:D6:DE:0C:E8:5F:F1:92:32:46:D8:04:E1:9A:38:2E:AD"}}},"request":{"raw":"GET /_next/static/chunks/36fc4d948ba3a225.js HTTP/1.1\r\nHost: marulabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://marulabet.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 11 Jan 2026 02:02:24 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Thu, 25 Dec 2025 20:49:34 GMT\r\netag: W/\"2efc-19b57462730\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yeFjcL5BvluqBe3t%2BRDejWi7vJdSSdAcUce7uc542mWvxJqng3JXcWtE7DHTOKUeelua4f63lSvoLxp%2BKSbJBmIWN%2BTg9gqzUfQs\"}]}\r\ncf-ray: 9bc0d4eed8df56ae-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12028,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (11671)","md5":"e5bc9167be44dabe2893fa87d2c689a7","sha1":"1191b2edbf10088a625a6e28e1e83384e57c8523","sha256":"ddc188cb8c7cc0352fcdb496595255d9ff9cbce2899969f0b3df0dd1fe500822","sha512":"124d650dd03b5a40c008860bd00f38c49cbb13802eba361286c77c75d8fd2d9da7a532c6ec43e3323ad18b8c684161d2eb7d0089a18666966af8b36d62e48b61","ssdeep":"192:GR0RE0bTl30i9mYWxj9vomOc3TeuR4s7KlHpIhkz60lwkf:uE0iUtxOc3auR4sWlH6au0lw+","tlshash":"0542a8647114eefce5ab10a2f82f851d312e7f98da0fc520b57cbca819244943a56fdb","first_seen":"2026-01-11T01:55:53.548038Z","last_seen":"2026-01-11T02:03:05.515537Z","times_seen":2,"resource_available":true,"data":null}},"time_used":68,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":68,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-11","alert":"Sinkholed","trigger":"marulabet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"marulabet.com/terms?_rsc=1jkk3","fqdn":"marulabet.com","domain":"marulabet.com","tld":"com"},"ip":{"addr":"104.21.14.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://marulabet.com/","date":"2026-01-11T02:02:24.487Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"marulabet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Dec 2025 13:13:09 GMT","end":"Mon, 30 Mar 2026 14:11:58 GMT"},"fingerprint":{"sha1":"FA:EA:E7:29:47:4D:0C:8A:97:DE:34:6B:B0:73:EC:0F:02:FE:A8:70","sha256":"70:01:CE:F8:9D:67:13:DC:31:37:03:2C:22:AB:68:81:D6:DE:0C:E8:5F:F1:92:32:46:D8:04:E1:9A:38:2E:AD"}}},"request":{"raw":"GET /terms?_rsc=1jkk3 HTTP/1.1\r\nHost: marulabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://marulabet.com/\r\nrsc: 1\r\nnext-router-prefetch: 1\r\nnext-router-segment-prefetch: /_head\r\nnext-url: /marulabet.com%26blue%26en/second-design\r\nsentry-trace: 9ffef7b14fef40b3bd2e466e13219bb9-bda6116b59959d50-0\r\nbaggage: sentry-environment=production,sentry-release=web%402.7.0,sentry-public_key=6d319d1014d598ea4a0365923853ee67,sentry-trace_id=9ffef7b14fef40b3bd2e466e13219bb9,sentry-sampled=false,sentry-sample_rand=0.22013458521750728,sentry-sample_rate=0.1\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 11 Jan 2026 02:02:24 GMT\r\ncontent-type: text/x-component\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nx-nextjs-rewritten-path: /marulabet.com\u0026blue\u0026en/second-design/terms\r\nx-middleware-rewrite: /marulabet.com\u0026blue\u0026en/second-design/terms?_rsc=1jkk3\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch, Accept-Encoding\r\nx-nextjs-cache: HIT\r\nx-nextjs-prerender: 1\r\nx-nextjs-postponed: 2\r\ncache-control: s-maxage=600, stale-while-revalidate=31535400\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VYZ5uGalPwWS85CIjDw%2BIh47Ei2ZMbx5o4TNZk9stHVm0iSkFUOfOigUWgukn3TYlus0%2BlDtwY58GF97Gukhh68dAmsLHnvEJy%2Bi\"}]}\r\ncf-ray: 9bc0d4ef18e356ae-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1965,"size_decoded":0,"mime_type":"text/x-component","magic":"ASCII text, with very long lines (1444)","md5":"6c421767d164700bb202c9c9dc5a75f1","sha1":"3307eee16bcd0354b14a8bc46fe024d0cfa83dc8","sha256":"1bde8df6c6a1bdd59c977fe118261690fa64a378821417905e1f73dc387b07a4","sha512":"da5bff3cd87a9f3e0299e5382e754348a6ae99f592871f64568466c98ff9a5a02dfcad92dcce2da0a0da9f42d2d0612d95ab29e1815cc95b53a6e4a04ad84467","ssdeep":"","tlshash":"f2410f7a880cec8e5a67c959086ff31a160d1677c6701e7adaaccd0e19c602e5f60f90","first_seen":"2026-01-11T02:03:05.226237Z","last_seen":"2026-01-11T02:03:05.226237Z","times_seen":1,"resource_available":false,"data":null}},"time_used":93,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":93,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-11","alert":"Sinkholed","trigger":"marulabet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"marulabet.com/_next/static/chunks/944ac4923c54ffbd.js","fqdn":"marulabet.com","domain":"marulabet.com","tld":"com"},"ip":{"addr":"104.21.14.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://marulabet.com/","date":"2026-01-11T02:02:24.759Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"marulabet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Dec 2025 13:13:09 GMT","end":"Mon, 30 Mar 2026 14:11:58 GMT"},"fingerprint":{"sha1":"FA:EA:E7:29:47:4D:0C:8A:97:DE:34:6B:B0:73:EC:0F:02:FE:A8:70","sha256":"70:01:CE:F8:9D:67:13:DC:31:37:03:2C:22:AB:68:81:D6:DE:0C:E8:5F:F1:92:32:46:D8:04:E1:9A:38:2E:AD"}}},"request":{"raw":"GET /_next/static/chunks/944ac4923c54ffbd.js HTTP/1.1\r\nHost: marulabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://marulabet.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 11 Jan 2026 02:02:24 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Sat, 03 Jan 2026 18:08:44 GMT\r\netag: W/\"1121-19b850c23e0\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2oW93tnkMJ0uJ3ncfmLyutJLrmaCM%2BrfTZQCDVfvWVTNUHezltw%2FMKzUqTyR7jVn5fodaHRcWPWWqTWHcdUXqVCtC6aDDCebSt91\"}]}\r\ncf-ray: 9bc0d4f0c8f556ae-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4385,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (4028)","md5":"e0a3c6529b52f3ca76fac8b4824ee9af","sha1":"38b98c5b73f6c046e438618cb9085e16dfa344cb","sha256":"28f068c9ca2b7701f59bf1e653a54c3000dc2191a0800c26c1693ef283148541","sha512":"bd0a312fe3106a32e07f3c53a52c6ec5f4d434a2b485995731710da7d9c69c8f1aae5536cdb8469914ff8f2228875d802ab55d30af07eb0183e371249fa8b94a","ssdeep":"96:ESEwSEWAR3IWcvh4KyqcnnToxHYypVENVIctVwdj6BKGyFpEKo:H1KW/nExH/pVsIctC6A9sd","tlshash":"ac915494a990efdcb45e01a8a03dc00db16d6e6dce1eca39f1ac34b129550d53b6b7c6","first_seen":"2026-01-11T01:55:53.465489Z","last_seen":"2026-02-19T17:02:28.643228Z","times_seen":73,"resource_available":true,"data":null}},"time_used":55,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":55,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-11","alert":"Sinkholed","trigger":"marulabet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"marulabet.com/_next/static/media/DMSans_Bold-s.p.8bea84e5.ttf","fqdn":"marulabet.com","domain":"marulabet.com","tld":"com"},"ip":{"addr":"104.21.14.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://marulabet.com/","date":"2026-01-11T02:02:20.312Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"marulabet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Dec 2025 13:13:09 GMT","end":"Mon, 30 Mar 2026 14:11:58 GMT"},"fingerprint":{"sha1":"FA:EA:E7:29:47:4D:0C:8A:97:DE:34:6B:B0:73:EC:0F:02:FE:A8:70","sha256":"70:01:CE:F8:9D:67:13:DC:31:37:03:2C:22:AB:68:81:D6:DE:0C:E8:5F:F1:92:32:46:D8:04:E1:9A:38:2E:AD"}}},"request":{"raw":"GET /_next/static/media/DMSans_Bold-s.p.8bea84e5.ttf HTTP/1.1\r\nHost: marulabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://marulabet.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 11 Jan 2026 02:02:20 GMT\r\ncontent-type: font/ttf\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Wed, 07 Jan 2026 18:59:37 GMT\r\netag: W/\"dbd0-19b99d429a8\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wFeBM4tAC%2F%2BBWXXhGm5QHE2qTdnzLVnsA65sA7%2B2mF0HgoHMF%2BICqamQc0awJ%2FRJayIZTCxf98oaYmWTyiXo61gevSSLRM82p8Sk\"}]}\r\ncf-ray: 9bc0d4d4aff856ae-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":56272,"size_decoded":0,"mime_type":"font/ttf","magic":"TrueType Font data, 16 tables, 1st \"GDEF\", 42 names, Microsoft, language 0x409","md5":"337352e89c0a500c19e7c3a1cd83161c","sha1":"5987ba6a8b8c8cc7f755431eca614ea7f5de1b96","sha256":"7f5b8463e4c88e51ebc803105b9099def8163754f3a4453bb66f822878471499","sha512":"40d9cd93dffd18143dced57120735d2b31bb2added5cb801fdde509eb9f44db073aa69656befbb1eef6d957e3c4d77cb4c73e814ad72f64b46947c4a9e1d60ef","ssdeep":"768:PORWnLfP9U7ifzsufcbBUZPt7zrjrhPwUBUBv5pGUh08QtKFhj0akpAQ:POgzC7eQ+ckzHxw2MYq08QYrj0akpx","tlshash":"31436da6f721a30cd3676dbc985343b44b75be34be22475bd975273fee050a04c22a89","first_seen":"2023-11-01T17:45:54Z","last_seen":"2026-07-30T14:11:56.979443Z","times_seen":508,"resource_available":false,"data":null}},"time_used":154,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":81,"receive":73,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-11","alert":"Sinkholed","trigger":"marulabet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"marulabet.com/_next/static/chunks/70c45d6675f019b3.js","fqdn":"marulabet.com","domain":"marulabet.com","tld":"com"},"ip":{"addr":"104.21.14.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://marulabet.com/","date":"2026-01-11T02:02:20.376Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"marulabet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Dec 2025 13:13:09 GMT","end":"Mon, 30 Mar 2026 14:11:58 GMT"},"fingerprint":{"sha1":"FA:EA:E7:29:47:4D:0C:8A:97:DE:34:6B:B0:73:EC:0F:02:FE:A8:70","sha256":"70:01:CE:F8:9D:67:13:DC:31:37:03:2C:22:AB:68:81:D6:DE:0C:E8:5F:F1:92:32:46:D8:04:E1:9A:38:2E:AD"}}},"request":{"raw":"GET /_next/static/chunks/70c45d6675f019b3.js HTTP/1.1\r\nHost: marulabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://marulabet.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 11 Jan 2026 02:02:20 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Wed, 07 Jan 2026 17:32:54 GMT\r\netag: W/\"7a59-19b9984c570\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RWh1Bg2%2BQFWPOzeP4P2yR%2FrjcULjmaRSb11exLaqrhbXTuE7%2BQGR5WlLgvbWGm5iAI2nBRQYoHAESWaJxOE9qVWV0yt3G1%2FxUpeQ\"}]}\r\ncf-ray: 9bc0d4d4d80b56ae-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":31321,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (30964)","md5":"109dedfa8a9df629754107a4360cbed2","sha1":"dca0b5125582597623dd7a5f137bb172eacebd4b","sha256":"66937c36d62b42f9c0de04ed3961be40fff3bca6a84a6e8675ccf6bcb7bcb244","sha512":"75917cbf7e84472836f0f36f0d6204002de0ef185d062a67a4160f39b8165bcdb07ed964ccf923f78e9a4bec22cbda7fd444445695eb1f68f809df6d0d9a2def","ssdeep":"384:I+FjjzUO4kzleEPQKKUdoxUCHSWiDp1NpTLTJJQrtgG40/H5JiereqeCEYjYvbxI:I8jkO4YlMsdpCzifNpTByEqrddwR4","tlshash":"96e294a971d5f4910ba354b5803f500bf23e0c76296da0f4e3a2cdf9b9a055ed132f9a","first_seen":"2026-01-11T01:55:53.490165Z","last_seen":"2026-02-19T17:02:28.781185Z","times_seen":96,"resource_available":true,"data":null}},"time_used":117,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":77,"receive":40,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-11","alert":"Sinkholed","trigger":"marulabet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"marulabet.com/icons/coinsIcons/btc.svg","fqdn":"marulabet.com","domain":"marulabet.com","tld":"com"},"ip":{"addr":"104.21.14.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://marulabet.com/","date":"2026-01-11T02:02:20.997Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"marulabet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Dec 2025 13:13:09 GMT","end":"Mon, 30 Mar 2026 14:11:58 GMT"},"fingerprint":{"sha1":"FA:EA:E7:29:47:4D:0C:8A:97:DE:34:6B:B0:73:EC:0F:02:FE:A8:70","sha256":"70:01:CE:F8:9D:67:13:DC:31:37:03:2C:22:AB:68:81:D6:DE:0C:E8:5F:F1:92:32:46:D8:04:E1:9A:38:2E:AD"}}},"request":{"raw":"GET /icons/coinsIcons/btc.svg HTTP/1.1\r\nHost: marulabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://marulabet.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 11 Jan 2026 02:02:21 GMT\r\ncontent-type: image/svg+xml\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Sat, 27 Dec 2025 17:40:04 GMT\r\netag: W/\"657-19b60e563fd\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vPYMs5dOHru5oh6hptIWeysQgp5n1FE97Q7%2FhVCpGvfwSYZuTJp3PGMPbe4NpaGPoOZY18zVv43rlJ7RAsuSWliph2D8B0jCFUSd\"}]}\r\ncf-ray: 9bc0d4d9284a56ae-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1623,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"570e615bf3ec1a7326bc1f70d39c7405","sha1":"a1f6ab28a5345d66ebd567f75a134999b4dabd1b","sha256":"da46af7c56dc044526a33498545b9d9058ea0eef37822918525f835daaf12e14","sha512":"71145a994efa3a2c672f17864b073f077960b11e2e434e826234dc4b9e405cb7662b00fd2e108b0f0c913e717f87090ed0e6cdf245d909c49f2228f2c9085980","ssdeep":"","tlshash":"e6314fdcffab4df42b44d2a6993200c8661364f85b444a60cb10ae1938408a9c993dc9","first_seen":"2026-01-11T01:55:53.529551Z","last_seen":"2026-02-01T16:58:56.332083Z","times_seen":3,"resource_available":false,"data":null}},"time_used":70,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":70,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-11","alert":"Sinkholed","trigger":"marulabet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"marulabet.com/icons/coinsIcons/doge.svg","fqdn":"marulabet.com","domain":"marulabet.com","tld":"com"},"ip":{"addr":"104.21.14.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://marulabet.com/","date":"2026-01-11T02:02:21.008Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"marulabet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Dec 2025 13:13:09 GMT","end":"Mon, 30 Mar 2026 14:11:58 GMT"},"fingerprint":{"sha1":"FA:EA:E7:29:47:4D:0C:8A:97:DE:34:6B:B0:73:EC:0F:02:FE:A8:70","sha256":"70:01:CE:F8:9D:67:13:DC:31:37:03:2C:22:AB:68:81:D6:DE:0C:E8:5F:F1:92:32:46:D8:04:E1:9A:38:2E:AD"}}},"request":{"raw":"GET /icons/coinsIcons/doge.svg HTTP/1.1\r\nHost: marulabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://marulabet.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 11 Jan 2026 02:02:21 GMT\r\ncontent-type: image/svg+xml\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Sat, 27 Dec 2025 17:40:04 GMT\r\netag: W/\"53c-19b60e56431\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=iLxsRXR0GguCU4ZCg%2FFETLg6r%2BIt%2BA82n3dSnbXwI5BYuFA7NKNkrYQpCM0LSaEFw0aF07sVnrHvkZpLuJbfmYF%2F9xxkqukysK3u\"}]}\r\ncf-ray: 9bc0d4d9385256ae-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1340,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"4ce94536e11e469a5967625190c99768","sha1":"43b1b7d1d0a8e8a33062f50873946049188c5dce","sha256":"0764c4d3d7d2af6d7f45dd0281a1eb0c895d5ccaf84ef014995b192cd0a8d29a","sha512":"d29592cd00c6566aaad84edae53ba7d6f7596d378401e0613fd601b7c2bff9704b1f7e8bbf87475ad1a188fe415a40fe02ee64ad3b675411327c0010662897d4","ssdeep":"","tlshash":"382172dc9b1308f9dd44d398eb2a30dc310be0ef6a840738ea98561f3866439c84a568","first_seen":"2026-01-11T01:55:53.419542Z","last_seen":"2026-02-01T16:58:56.199504Z","times_seen":3,"resource_available":false,"data":null}},"time_used":54,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":54,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-11","alert":"Sinkholed","trigger":"marulabet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"marulabet.com/games_new_webp/mines.webp","fqdn":"marulabet.com","domain":"marulabet.com","tld":"com"},"ip":{"addr":"104.21.14.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://marulabet.com/","date":"2026-01-11T02:02:22.496Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"marulabet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Dec 2025 13:13:09 GMT","end":"Mon, 30 Mar 2026 14:11:58 GMT"},"fingerprint":{"sha1":"FA:EA:E7:29:47:4D:0C:8A:97:DE:34:6B:B0:73:EC:0F:02:FE:A8:70","sha256":"70:01:CE:F8:9D:67:13:DC:31:37:03:2C:22:AB:68:81:D6:DE:0C:E8:5F:F1:92:32:46:D8:04:E1:9A:38:2E:AD"}}},"request":{"raw":"GET /games_new_webp/mines.webp HTTP/1.1\r\nHost: marulabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://marulabet.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 11 Jan 2026 02:02:22 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1734\r\npriority: u=4,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Thu, 01 Jan 2026 18:08:17 GMT\r\netag: W/\"6c6-19b7abf0268\"\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nbUwIkZfQfEl5z%2Ftpbvh9XXc7ftn%2FkyUMNVwfuuV4Po7QtUiuZYJ58qaMXkoDyYbNieSMte3PQpyeGWZHdHn%2FBpIFhpiT%2FU294Po\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9bc0d4e2a88656ae-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1734,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 208x257, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"7fdb901c172b335aa0c59289d0ca1d53","sha1":"164b3ba4e8ef8a7f10d158a69f9f664e63085c6f","sha256":"a54b22a7226f14e4f83d960f2e8ae53dda7ba0ebe49587b1209ff36898e26bff","sha512":"633554002826f300bb24d88d9de30388a612c4f9afff50dc6aade8996a8dce578e4c7d0a98ae474dc83d1bf2ca0bb86a11db9c916f3c9d515b7a11ae414f7c4d","ssdeep":"","tlshash":"bf310b3e015b206166e29b6f633d17a48dd505c98eb3ceb4244fcea2ac14fd1d560f11","first_seen":"2026-01-11T01:55:53.426802Z","last_seen":"2026-02-19T17:02:28.799021Z","times_seen":73,"resource_available":false,"data":null}},"time_used":64,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":63,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-11","alert":"Sinkholed","trigger":"marulabet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"marulabet.com/second-design/ranks/platinum3.webp","fqdn":"marulabet.com","domain":"marulabet.com","tld":"com"},"ip":{"addr":"104.21.14.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://marulabet.com/","date":"2026-01-11T02:02:23.768Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"marulabet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Dec 2025 13:13:09 GMT","end":"Mon, 30 Mar 2026 14:11:58 GMT"},"fingerprint":{"sha1":"FA:EA:E7:29:47:4D:0C:8A:97:DE:34:6B:B0:73:EC:0F:02:FE:A8:70","sha256":"70:01:CE:F8:9D:67:13:DC:31:37:03:2C:22:AB:68:81:D6:DE:0C:E8:5F:F1:92:32:46:D8:04:E1:9A:38:2E:AD"}}},"request":{"raw":"GET /second-design/ranks/platinum3.webp HTTP/1.1\r\nHost: marulabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://marulabet.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 11 Jan 2026 02:02:23 GMT\r\ncontent-type: image/webp\r\ncontent-length: 5966\r\npriority: u=4,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Sat, 09 Nov 2024 04:17:42 GMT\r\netag: W/\"174e-1930f245e70\"\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zgQYp98Oeid9SfGS1lOQaB5ozG4dHV47JrH9U%2FRH4iQoL67cTERoXZAAj5Vl%2FYz%2BbL4bfvD4y94qvQCYr%2BUMYDBi%2Fi0E8k48UEGc\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9bc0d4ea78aa56ae-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5966,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"b2c86c0f03f99176fbecc9cd4385957d","sha1":"3cad9a6ad60de77081e4262fab65116dd5e2eb6b","sha256":"40398e35501f3d1fe1bb67d3f041554af47cee1992e09348684366c2ac77afed","sha512":"3dba5a749ed27cf3e306d827ff1aeaef44b5a8a9fdda8c64f8b4e2908897d2ebdce614f7c6fd5ab671b21af5e00bc3287e9496828298d3bca351d4ba728a3b46","ssdeep":"96:d0RqdQalOrDJ/aw7j1+j+IUIyKM3aRf5NVy8me+AsOHcKFkdzIiVw1wAS1s6Dsdu:dsqB4N+EIy/a1vCJAsO5F6zGyAksosL+","tlshash":"22c17d3575dcc85d6844cc76b182cffa15767280b5a7302dc5e0ba398d2498b639d4e3","first_seen":"2026-01-11T02:03:05.524332Z","last_seen":"2026-02-19T17:02:28.716307Z","times_seen":36,"resource_available":false,"data":null}},"time_used":95,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":90,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-11","alert":"Sinkholed","trigger":"marulabet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"marulabet.com/?action=register\u0026_rsc=1xamo","fqdn":"marulabet.com","domain":"marulabet.com","tld":"com"},"ip":{"addr":"104.21.14.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://marulabet.com/","date":"2026-01-11T02:02:23.991Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"marulabet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Dec 2025 13:13:09 GMT","end":"Mon, 30 Mar 2026 14:11:58 GMT"},"fingerprint":{"sha1":"FA:EA:E7:29:47:4D:0C:8A:97:DE:34:6B:B0:73:EC:0F:02:FE:A8:70","sha256":"70:01:CE:F8:9D:67:13:DC:31:37:03:2C:22:AB:68:81:D6:DE:0C:E8:5F:F1:92:32:46:D8:04:E1:9A:38:2E:AD"}}},"request":{"raw":"GET /?action=register\u0026_rsc=1xamo HTTP/1.1\r\nHost: marulabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://marulabet.com/\r\nrsc: 1\r\nnext-router-prefetch: 1\r\nnext-router-segment-prefetch: /!KHVzZXItc2lkZSk\r\nnext-url: /marulabet.com%26blue%26en/second-design\r\nsentry-trace: 9ffef7b14fef40b3bd2e466e13219bb9-b9909ba017ebd512-0\r\nbaggage: sentry-environment=production,sentry-release=web%402.7.0,sentry-public_key=6d319d1014d598ea4a0365923853ee67,sentry-trace_id=9ffef7b14fef40b3bd2e466e13219bb9,sentry-sampled=false,sentry-sample_rand=0.22013458521750728,sentry-sample_rate=0.1\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 11 Jan 2026 02:02:24 GMT\r\ncontent-type: text/x-component\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nx-nextjs-rewritten-path: /marulabet.com\u0026blue\u0026en/second-design\r\nx-nextjs-rewritten-query: action=register\r\nx-middleware-rewrite: /marulabet.com\u0026blue\u0026en/second-design?action=register\u0026_rsc=1xamo\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch, Accept-Encoding\r\nx-nextjs-cache: HIT\r\nx-nextjs-prerender: 1\r\nx-nextjs-postponed: 2\r\ncache-control: s-maxage=600, stale-while-revalidate=31535400\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=L01FRonzHbIeHB1uOwPGaAexK%2BYjYyPrs2zY4Fiq40ZWjVR9HOezktH08CY9gQpCQcA6Qhwp7BHjSMal8aztZMCAWfSCtu1LSNrg\"}]}\r\ncf-ray: 9bc0d4ebf8c856ae-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1614,"size_decoded":0,"mime_type":"text/x-component","magic":"ASCII text, with very long lines (1286)","md5":"df00cffd153cc0c6e9c361e50375c8e4","sha1":"d361ce5b545f6a33927df36db635725724d98d8f","sha256":"b35ccb22f8e798fa2c4615ad659be324ed0c9189cad10a22d599a060429309d4","sha512":"4ca23405320367721b2a5cc9e2b9646568cc74fdc5e303098869612f1d3cec9e50a5846804b604d9dad5ae380369f2125008975d904a166684e4dd65cd062048","ssdeep":"","tlshash":"58313334960cee3d7d6ac198146ff30a914d043fa3700bb8a7acee28429503e7b467c1","first_seen":"2026-01-11T01:55:53.510579Z","last_seen":"2026-01-11T02:03:05.384685Z","times_seen":2,"resource_available":false,"data":null}},"time_used":89,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":89,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-11","alert":"Sinkholed","trigger":"marulabet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"marulabet.com/_next/static/chunks/4c6af75a4d489639.js","fqdn":"marulabet.com","domain":"marulabet.com","tld":"com"},"ip":{"addr":"104.21.14.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://marulabet.com/","date":"2026-01-11T02:02:20.424Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"marulabet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Dec 2025 13:13:09 GMT","end":"Mon, 30 Mar 2026 14:11:58 GMT"},"fingerprint":{"sha1":"FA:EA:E7:29:47:4D:0C:8A:97:DE:34:6B:B0:73:EC:0F:02:FE:A8:70","sha256":"70:01:CE:F8:9D:67:13:DC:31:37:03:2C:22:AB:68:81:D6:DE:0C:E8:5F:F1:92:32:46:D8:04:E1:9A:38:2E:AD"}}},"request":{"raw":"GET /_next/static/chunks/4c6af75a4d489639.js HTTP/1.1\r\nHost: marulabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://marulabet.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 11 Jan 2026 02:02:20 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Wed, 07 Jan 2026 18:59:38 GMT\r\netag: W/\"d7a-19b99d42d90\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jVkeonbzFWx5hInCkUCz7k4n9D8G8rJMHE87S5lK8v7swSH8K1Uqc8mjmpio8GtW%2Bm3%2FDlLkNUvchVMJg2WF6%2FSueEDv3HIqg5c9\"}]}\r\ncf-ray: 9bc0d4d5082a56ae-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3450,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (3093)","md5":"c1ffd2810057714d095867acc45f47ef","sha1":"6eceedd6553cf3063278c27de1aee25bb0667c36","sha256":"9604e0e5b4711c50c013e5c92da26573dfb72ae0ec3b83cb53ed75ea761a2d4c","sha512":"d913954244730850117b7c5363093e05714597040db3655885e941baf6cf66fde9ff661a6b0d1d0c9f8397e67197b0c0b7a725e1f85142d9d8e1ece11a25efcf","ssdeep":"","tlshash":"6a6101b6239433bab4c00fa442e6702611f53a6b30cf5174dbab4588fc55ceb907a55b","first_seen":"2026-01-11T01:55:53.535061Z","last_seen":"2026-02-02T22:33:10.184641Z","times_seen":69,"resource_available":true,"data":null}},"time_used":73,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":67,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-11","alert":"Sinkholed","trigger":"marulabet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"marulabet.com/api/socket.io/?EIO=4\u0026transport=polling\u0026t=39oqt42d\u0026sid=Ppq5ZA92h5AuiYkIAl0Q","fqdn":"marulabet.com","domain":"marulabet.com","tld":"com"},"ip":{"addr":"104.21.14.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://marulabet.com/","date":"2026-01-11T02:02:23.246Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"marulabet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Dec 2025 13:13:09 GMT","end":"Mon, 30 Mar 2026 14:11:58 GMT"},"fingerprint":{"sha1":"FA:EA:E7:29:47:4D:0C:8A:97:DE:34:6B:B0:73:EC:0F:02:FE:A8:70","sha256":"70:01:CE:F8:9D:67:13:DC:31:37:03:2C:22:AB:68:81:D6:DE:0C:E8:5F:F1:92:32:46:D8:04:E1:9A:38:2E:AD"}}},"request":{"raw":"POST /api/socket.io/?EIO=4\u0026transport=polling\u0026t=39oqt42d\u0026sid=Ppq5ZA92h5AuiYkIAl0Q HTTP/1.1\r\nHost: marulabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAuthorization: undefined\r\nContent-type: text/plain;charset=UTF-8\r\nsentry-trace: 9ffef7b14fef40b3bd2e466e13219bb9-99f89a22e2c18bfe-0\r\nbaggage: sentry-environment=production,sentry-release=web%402.7.0,sentry-public_key=6d319d1014d598ea4a0365923853ee67,sentry-trace_id=9ffef7b14fef40b3bd2e466e13219bb9,sentry-sampled=false,sentry-sample_rand=0.22013458521750728,sentry-sample_rate=0.1\r\nContent-Length: 30\r\nOrigin: https://marulabet.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://marulabet.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":30,"data":"42[\"lastWinsNewOpen:highWins\"]"}},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 11 Jan 2026 02:02:23 GMT\r\ncontent-type: text/html\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CCz3fWSXM9PDeHNAjIhq1WduR1BNgyc2xnFYEp4LbIs6S%2B4wGTQY1M46JJu48rO1gGiRYQmKR4bHl6rSeiV4yQ8F4uosl%2Fl5TIlF\"}]}\r\npriority: u=3,i=?0\r\naccess-control-allow-origin: *\r\ncache-control: no-store\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9bc0d4e7589256ae-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2,"size_decoded":0,"mime_type":"text/html","magic":"ASCII text, with no line terminators","md5":"444bcb3a3fcf8389296c49467f27e1d6","sha1":"7a85f4764bbd6daf1c3545efbbf0f279a6dc0beb","sha256":"2689367b205c16ce32ed4200942b8b8b1e262dfc70d9bc9fbc77c49699a4f1df","sha512":"9fbbbb5a0f329f9782e2356fa41d89cf9b3694327c1a934d6af2a9df2d7f936ce83717fb513196a4ce5548471708cd7134c2ae99b3c357bcabb2eafc7b9b7570","ssdeep":"","tlshash":"c710000000000000300000000000000000000000000000000000000000000c0000c000","first_seen":"2023-03-08T02:32:37Z","last_seen":"2026-08-05T14:03:55.485392Z","times_seen":445393,"resource_available":true,"data":null}},"time_used":83,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":83,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-11","alert":"Sinkholed","trigger":"marulabet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"marulabet.com/games_new_webp/hacksaw-rotten.webp","fqdn":"marulabet.com","domain":"marulabet.com","tld":"com"},"ip":{"addr":"104.21.14.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://marulabet.com/","date":"2026-01-11T02:02:23.800Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"marulabet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Dec 2025 13:13:09 GMT","end":"Mon, 30 Mar 2026 14:11:58 GMT"},"fingerprint":{"sha1":"FA:EA:E7:29:47:4D:0C:8A:97:DE:34:6B:B0:73:EC:0F:02:FE:A8:70","sha256":"70:01:CE:F8:9D:67:13:DC:31:37:03:2C:22:AB:68:81:D6:DE:0C:E8:5F:F1:92:32:46:D8:04:E1:9A:38:2E:AD"}}},"request":{"raw":"GET /games_new_webp/hacksaw-rotten.webp HTTP/1.1\r\nHost: marulabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://marulabet.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 11 Jan 2026 02:02:23 GMT\r\ncontent-type: image/webp\r\ncontent-length: 9464\r\npriority: u=4,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Thu, 01 Jan 2026 18:08:09 GMT\r\netag: W/\"24f8-19b7abee328\"\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pf3swBlQcQplw4vf8O25xXDEwVYicxIa933sLlVqCVpiD2QXnXAHP61JG%2BpGs%2FgatE%2BClzY52AkeLSCQxGEZHNv%2BzaShsiZcHRr7\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9bc0d4eaa8b556ae-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9464,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 180x236, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"08ee8146239675d99028245f70981fa1","sha1":"5adcca68cea42245f3df80ff6a58fc1b7129b6e1","sha256":"eeaa5ac35c194368149a6e0cbcd3ce0e40d9de9bc398ac26bb216998ea4fae4c","sha512":"c0f3b57b574cdd07e2b07966aa645fdfdaa16494e941af4316923bafe66aba0c922eeb81b073d174a34bb87804479e9d477de685847c12c70d5546d63e5cf2d9","ssdeep":"192:9eDJ4F+eB1bhby1wB/TMLJGvA6FXsMxN+Y1wan/vfK5Lr4f:M9411pMgbMIvAuXsyyaf1f","tlshash":"8012b06fa917a4c37507bae7e0f4ca81285cb4c61d3681810c3c26ebbf2d4e95699683","first_seen":"2026-01-11T02:03:05.528367Z","last_seen":"2026-01-11T02:03:05.528367Z","times_seen":1,"resource_available":false,"data":null}},"time_used":67,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":65,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-11","alert":"Sinkholed","trigger":"marulabet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"marulabet.com/?type=originals\u0026_rsc=r54j0","fqdn":"marulabet.com","domain":"marulabet.com","tld":"com"},"ip":{"addr":"104.21.14.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://marulabet.com/","date":"2026-01-11T02:02:23.823Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"marulabet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Dec 2025 13:13:09 GMT","end":"Mon, 30 Mar 2026 14:11:58 GMT"},"fingerprint":{"sha1":"FA:EA:E7:29:47:4D:0C:8A:97:DE:34:6B:B0:73:EC:0F:02:FE:A8:70","sha256":"70:01:CE:F8:9D:67:13:DC:31:37:03:2C:22:AB:68:81:D6:DE:0C:E8:5F:F1:92:32:46:D8:04:E1:9A:38:2E:AD"}}},"request":{"raw":"GET /?type=originals\u0026_rsc=r54j0 HTTP/1.1\r\nHost: marulabet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://marulabet.com/\r\nrsc: 1\r\nnext-router-prefetch: 1\r\nnext-router-segment-prefetch: /_tree\r\nnext-url: /marulabet.com%26blue%26en/second-design\r\nsentry-trace: 9ffef7b14fef40b3bd2e466e13219bb9-84cf37c930d11b3f-0\r\nbaggage: sentry-environment=production,sentry-release=web%402.7.0,sentry-public_key=6d319d1014d598ea4a0365923853ee67,sentry-trace_id=9ffef7b14fef40b3bd2e466e13219bb9,sentry-sampled=false,sentry-sample_rand=0.22013458521750728,sentry-sample_rate=0.1\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 11 Jan 2026 02:02:23 GMT\r\ncontent-type: text/x-component\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nx-nextjs-rewritten-path: /marulabet.com\u0026blue\u0026en/second-design\r\nx-nextjs-rewritten-query: type=originals\r\nx-middleware-rewrite: /marulabet.com\u0026blue\u0026en/second-design?type=originals\u0026_rsc=r54j0\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch, Accept-Encoding\r\nx-nextjs-cache: HIT\r\nx-nextjs-prerender: 1\r\nx-nextjs-postponed: 2\r\ncache-control: s-maxage=600, stale-while-revalidate=31535400\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bA1bYTJVV0m0MBga%2BjLUd7jUlnUwwAzxkeqMshEJ0NWmYN5%2Bc3ZkwjrZ96moI9fa%2FbqhSTTyttulVRlgTq1jkhzolAQf7fRCXG3I\"}]}\r\ncf-ray: 9bc0d4eac8c256ae-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2333,"size_decoded":0,"mime_type":"text/x-component","magic":"ASCII text, with very long lines (824)","md5":"6692d7ef9eec533159bb5395328be1c6","sha1":"0b2a9e2255b68734cc3d0861aad1c9f452ecdfa3","sha256":"28f8817de7e458b38061ed4462ee3d2c092cc6b93dde09569f0cae3b480a4184","sha512":"50db858ff850252a14f071bd616fc4f2713a399aa2f13c3d35e521acee21313175145af615c409289c821606b4d2e9b7974e18eb6f61f3bde056fea40e5c344f","ssdeep":"","tlshash":"2a419e0cc8499eb498c9d59a61d5d7016558bf37f1b88dace04bdca4038b03d0feab87","first_seen":"2026-01-11T02:03:05.260326Z","last_seen":"2026-01-11T02:03:05.260326Z","times_seen":1,"resource_available":false,"data":null}},"time_used":100,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":100,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-11","alert":"Sinkholed","trigger":"marulabet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}}]}